last executing test programs: 3.811263016s ago: executing program 2 (id=1453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x10000ec}}], 0x18}}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1d, 0x7, 0xfffffff6, 0x4, 0x8084, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @value, @void, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x262b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000003000000000000000000003818110000", @ANYRES32, @ANYBLOB="00000000cca3ad2cb702000014000000b7030000000000008500000083000000bf09000000ec7bda2e4e75c942f84f73804b2b0600000055090100000000009500000000000000181100004e991845724900", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181f0000", @ANYRES32, @ANYBLOB="00000000000000000064080007000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0xea0b, 0x0, 0x0, 0x100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000ec0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], &(0x7f0000000f00)=[{0x1, 0x1, 0x7, 0xc}, {0x5, 0x2, 0x4, 0xb}, {0x2, 0x3, 0x4, 0x8}, {0x3, 0x5, 0x10}, {0x3, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x3}, {0x4, 0x1, 0x0, 0x1}, {0x2, 0x5, 0xd, 0x8}], 0x10, 0x7, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x67, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', r11, 0x29, 0x2e, 0x6, 0x6, 0x0, @mcast2, @mcast2, 0x80, 0x40, 0x3, 0x6}}) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a98835c2b5980000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r12}, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0) ioctl(r2, 0x1e0000, &(0x7f0000000880)="41d1253bf87b44f152ec905f6ba0e4e036608175279139368c183c6756cbdbec27c98f52b017a95ae2af95b9bcd447b51e8e49d65a09f59db7c6c0515d779450f2d5a15e18fa04beeb1bb156836b8e1babb2b77c97480090b37415e1beaf005dc0c8") syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 3.475526539s ago: executing program 2 (id=1459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x40, 0x2, 0x7, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0x0, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xa, 0x2, 0x1, 0x0, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008910}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_int(r6, 0x0, 0x31, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000100)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x4305}}}}, 0x16) accept4(r5, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 2.720305162s ago: executing program 3 (id=1466): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r2, 0x0, 0x81) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7fefb, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x8, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 2.615614152s ago: executing program 4 (id=1468): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x20000400) unshare(0x40400) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x3, 0x204, 0x401, 0xfffffffb, 0x3, 0x2, 0x7d90}, &(0x7f0000000240)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x82}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0xff, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0xe8, 0x2c, 0xd27, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_EMATCHES={0xb4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x70, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="f5", @TCF_META_TYPE_VAR="57e40a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a4bd9f02a6a77e85", @TCF_META_TYPE_VAR="053d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x9, 0x1}, {0x0, 0x10, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR='\tQ-N', @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="84952cddba26", @TCF_META_TYPE_VAR="9c997da4b74ad1", @TCF_META_TYPE_VAR="35e870e9efda282f", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xd, 0x1}, {0xff, 0x5, 0x2}}}]}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x235b, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 2.445799481s ago: executing program 2 (id=1470): mmap(&(0x7f00000ed000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080500000100000080000000d72fb8dfcf8b2ad4cffbaf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='cachefiles_ondemand_cread\x00', 0xffffffffffffffff, 0x0, 0x7ffffffffffd}, 0x18) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES8, @ANYRES64=r3], 0x184}}, 0x0) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000940)=ANY=[@ANYRESHEX=r0, @ANYBLOB="bb7f1cb2e3dad71b8fdf1d4c97271feca41d845f3277af9e2dbe32b76fe21bb88116a29557f683b5a85f44db845485015368a7a38e7d60d5cf373254d1a2f5ca2827f6e7764f2e293a3490550b8a3f772cd3dadd9025d37499e8942f986b57d26a8ee0bcf2a2adc5cf067591123abb5b9df4d375d0ad8f1ddfbe07ad157f584e02e5f17b96311ab69b58ae41468661a739282d280b6941f96615ef43c778a9f3fbef26e951342ec7", @ANYRES32], &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r7}, 0x10) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)="37e9f888efa0294921e61127f770cbccf7ecc6ed57a30fc4b7c43a7b34860579c721cd7064f1211da4e34f5981b87857b5ad2c51dc7ecf02f56a44025201be3fa48aefc3591b4f2fdebda2e7fec90c58ec0b7f625d0c6acaa2bfc37a12a066b6c6796986302f36776af0b443d9c7", 0x6e}], 0x1}, 0x40080c0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req={0x2, 0x4, 0x0, 0x1}, 0x10) 1.63887145s ago: executing program 3 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf4, 0xa8, @random="c2f6c4290c9c57343d674afbe7f469ec6f9d54174b238c40caa6d984ce95faec26ed5b5ce02987777d8e02c3282eb1383f74ee4422e8c5c6c504e750beac08cdb47bdbbe05292d843912202ac0002a7bf396522dd12fa231da3b888df5738a9300f65b12a529937f1e4cce19539a2d453d4c9e02d90f26369f21c9a127d6eb97dd43aaf5b626f173f6e5c206d5752949d6029881329d27f7ccd23b815530197585b089850acdbf93369774708d841d113aa5bb9b68d947fb38e77ed3e7e609ce7e471062be4d5003b5f25cd36f9e2eefae338d2d16689b59648ac4e3a3c98dbaa4f1482a4b0b511d7fd6e1224f4014e2"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000004) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000300)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, 0x24) syz_init_net_socket$llc(0x1a, 0x4, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 1.610889075s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300000000b100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r7, r9, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r6}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r3, r10, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000002000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d05fcda75aa5403800000000f6000000000000"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r11}, 0x18) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/276, @ANYRES16=r12, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r14 = socket$inet(0xa, 0x801, 0x84) connect$inet(r14, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r14, 0xfffffffd) (async) r15 = accept4(r14, 0x0, 0x0, 0x0) recvmmsg(r15, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) 1.451770491s ago: executing program 1 (id=1475): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000003c0)={0x5, 0x3, 0x85d4, 0xffff}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYBLOB="8000000002000200080004000000010008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.430081056s ago: executing program 3 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x10000}) ioctl(r4, 0x8b22, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="01002ebd7000ffdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="08005a800400018080005a802800038005000600020000000500040000000000040002000500040002000000050006000200000054000222"], 0xa4}, 0x1, 0x0, 0x0, 0x20}, 0x20000040) 1.344849429s ago: executing program 1 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008200000000e0a05000000000000000000070000090900010073797a30000000001c000b00000908000b4000000001140000001100010000000000000000000000001a78e6e067387a74b1191813084fe3cf719744ce515d813bd9b403be95a49d1454fee6ad40807026c3f13199bde2bf2bfef9fe0d9565623c9df3524280bc94509b91762a82205ccb751e9a40ce7c72e8fa227c2af19f8f5b618630dd5be1c9bbe066630c3e68f3779063f8cb586038eb6b70f05d80ad227af9d93b04eec5be7ec36828b46afc034e8ddb"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x6788, @none, 0x1000}, 0xe) listen(r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$kcm(0xf, 0x3, 0x2) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) recvmmsg$unix(r6, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000440)=""/191, 0xbf}], 0x1}}], 0x2, 0x400122a0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x3c, 0x101, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x401}, 0x4000) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.278758627s ago: executing program 4 (id=1478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000100000000000c0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000e00"/28], 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6], 0xec}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r7 = socket(0x10, 0x80002, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@private0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c80)=@ipv4_newroute={0x60, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x5, 0xfe, 0x1, 0xff, 0xb}, [@RTA_NH_ID={0x8, 0x1e, 0xb5a5}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xb, 0xff, r8}}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_UID={0x8, 0x19, r9}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x814) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001880)={0x0, 0x0, 0x0}, &(0x7f00000018c0)=0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = getpid() r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r12, r13, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r12}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001900)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001a00)=0xe8) r15 = getgid() sendmsg$netlink(r4, &(0x7f0000001b40)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0x1b, &(0x7f0000000ac0)=[{&(0x7f0000003fc0)={0x2b8, 0x1d, 0x40a, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x105, 0x0, 0x0, @pid}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x58, 0x0, 0x0, @uid}, @generic="1a9b66d2eaf72a509cf9cb92984b85e5d048a359646eb3f2c318fde0eee2e8b46c53c40c15b9b7955d413d84009b8ac1784fc5f7562d2ec617e45ad28f558c1ffbc0c919e51a5837f31069eb83ad1a75cb7a8207c6e061d396192e69b21b7059909ea90b4b04803ac510356930e8f2f15c3635356e59c3872eee9ec2d0555c5dcc7406733e74ff99ad5a4d2b332c2d7b1b6ffa8af7b66e9f0a71cf817bbf2db4d62d", @nested={0x1d8, 0xda, 0x0, 0x1, [@nested={0x4, 0xb8}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x2}, @generic="890c10fb93bdfae117de64a6f7cac44a6ebe3c76751c7d6619e9143fa5286f0ebe2611cc51db1362db01c5e5ed5eee60500aae3e4042147dab30edff980e0a734d8463bbd4c482c251fce21d3b13dbf75e02497817bb59beed177a260f6b4a695bd9db24a95ff384642a44f5b111e85e330fa3b4815169339a3361a115d425f5f5c549edf7bf21b288051a1dd0a8be1e0c1811f0f94418b69a97c84a", @generic="872f8b2a2ed6838c0dbdc9d7aec98d174026c015d2ac38fa96cb7fc55c094e6162c4e736cedb897e22230e0a336d36e70bb6a48c3b3adf887296c865d9fe32dd70b66df638cc5102fd85057fcd4379a5a65686468dfb265cbcecac30f40ef42596b8ddc2a59b9b892092e8c09c", @generic="9432cff6c72be15e1333e99a6c986930f3e0c31194554c2f95164acd42c36bf3d4e6e679a8bb4735c5a29004323c6e", @generic="aaa5dc485b699b1efc467ea185ef67134a9d33ed319b6179fafab7eb39990b4db5c58bc366a5b33ff2a0477378ddc168d7f40ae10390e3016373cc5e83bd593a2a5caf7ce5b394590cbf77b01e1c76a4de1f25b4aa78044697820879c21737b5c67b651dc4f81cbff4a80d76938398e0e454c9a918dcd8a114e9634109a4f2e8599453a9876a8c5be14886ed506fe3f77ef3e29945c4522618eb4e8eb3cae7", @nested={0x4, 0xcf}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0xc0000000}]}, @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x7f000000}]}, 0x2b8}, {&(0x7f0000000b80)={0x10, 0x34, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000000780)={0x20, 0x15, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x24, 0x0, 0x0, @uid}]}, 0x20}, {&(0x7f0000000880)={0x1cc, 0x16, 0x10, 0x70bd26, 0x25dfdbfd, "", [@generic="44598e511a74fc57de424eb4e3ef8bbd73136454d1d676e44c447e04acf00a9c8c1aef8e1e1493b7973d09fa08d152d64c3afd6631c6586ea89cb520ea45387193b7f538f3aac8438973bdd526e3f9abfcb0db52beaf3ac45569085b6b639d7ad8b45bcefe3064d3e98b827a63c23609a5f6a1ea32170dbaef8ca8a900280f69b5f2215ff87b780b02c161f18021fa9e4fc115e3810a013379e0e87c1c06102f17b8c7870bf4714e8c3c5beba84d59ab4325e4fd98126350cf3c059b8c09f4b9e2aad973c68a3802fa16f22143d5887fdfb5ac37", @typed={0x5, 0x7b, 0x0, 0x0, @str='\x00'}, @generic="7b3c4fd796bc3c523a537d4ed00f65417e973c09cbf6aea0515736164b7cfa9eddada7b194189e5a843f2f3d6cb0f4b0a1af608eb052e0da6ef78ac25917a1cf381c01bad7f3c132f00bbca89eb82c92990667e57f874d407dd6925ca30cb7d386adf7ba65ac7f8a0a601320b7ec5e9612353ac47683b97f321bea199dc6e8f9faa827dfd9769a13673a358e16cfeb8b6a1c5b254a934160f291f1e8bcbebb59a8b02af8b03e509ff79b65fd73e82a8bf72dfaadc07e58993ea8c202b5e47aaf9a71c4a0342b45d0107e70cadc3ff66f889174e97a79c1df6e7e0d84f6c506"]}, 0x1cc}, {&(0x7f0000000e80)={0x5b8, 0x36, 0x8, 0x70bd2b, 0x25dfdbff, "", [@nested={0x1bd, 0x65, 0x0, 0x1, [@generic="4f5105feb2f85f44c2484b531a0168e723ea082935ea86675030889b08617c07a33eb7471a0b22fd9b3be6099877aae5ce197f59307ea5801b68d6c50407b2291da32ed6f02f034b287bc9665339c35e4b240129c6f3aa3451ccc3378bf9f14d40a167975f1c20dfa1240e14616fa42f6c5e4fb9a172d1615beef17788785a72443da62e4e6e", @typed={0x8, 0x82, 0x0, 0x0, @pid}, @generic="8514c7514de0199a8389118b525b356792f3ce80a1b883e76151453b599d557394b473f0daccfc9f8ee24ae932cc98da6f5a42711cf764dd3bf8e81375af6e29dd14a9d5c30b918d99c600110c9f229e45fa1731c34953e47e65cccb60b4385ede8d25443082570935967f69bec53a0453b611d587ae06a9b540cf2e2e0d328299caa000c5a0a3ed85fb5d2062218ed1ad369e36fdfbbaba806e4df93506680ab0a954db5a1fbe0c796820bfa2020e4de3c764caa1fc0f7516999ea24ff9d659ebb3e809cd0281a8929f98d87de2db16bfbc4eccbfa9790effb3ab8e8c25526782030b4f7f28db5934e03cc76888", @generic="d57bdf00c499a6b757b06c9bf3dd49c77d85a9e7daec6d93e26ac99b6ffb07c10bc1bf0bb28c98248ee924ac094894fda5280945173b3c67946d3054f6"]}, @nested={0xa8, 0x70, 0x0, 0x1, [@generic="77499c8466da779e97668aa53e2d89d9fc326d2a8386c5d3cd734ae12c9061660e7f884c293c2711de83c7ac7ebd0e8fcd1699b20e79fee9e465ad9cda4515ef349a053173dc4786bf0128c88824bfdcb325d338707f0103e751115a85e215dce307eb0fdddb378798615925e8fb0cec4f12daf4fc7cfaeeb7484e445bcb6e1f", @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @typed={0x8, 0x140, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xf1}, @nested={0x4, 0x129}]}, @nested={0x97, 0x140, 0x0, 0x1, [@generic="88f7f1dc59d9328f9d129b9441bc34e0cc3aae34490128b88fdaa8e61ad5207b56bc0483dda2c61edba9efec96a091bd71ad80a43a9b7ec365", @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x129, 0x0, 0x0, @ipv4=@multicast2}, @generic="4bd712b3e60dce6a3e1cb4c244e61a40f8bdc8ca616a29fec3f9672c23892d678169d9b6e0053c7f252e48bccc75748cb64d637d23df64c07138348b214f", @typed={0x5, 0xa7, 0x0, 0x0, @str='\x00'}, @generic, @nested={0x4, 0xe3}]}, @nested={0x1c2, 0x71, 0x0, 0x1, [@generic="84dbda342ce5aca0b50821019a66eb4c1a36672fcfd409bc1907491c0224b51b0484a9f1b801815ab20f5130a0531ff0d3cd2a12680b27167c7cd8c734f01292546d9897b115c5e66e799d8440de42af9f91", @generic="d208e889c6849e0ebeb6885ed9470dc7e404ce4e97f6b2d97e9a89566fb0116ac818865eacfb3b15c96d17a68ebc6ca323e4d3a3d5182ad60ed95af102ebce856581de46fe8853c3acf0254cd1a33f07c4c353e1fe000ae3c4407e325c5462c8be0ad9e4bf690102e0059ed2bd6bf34e5e9061f6bcc41c398df976b8329ca5a6915851db4e0354e4ca08c81d924a4b3466f94cd23712ed22375a5a0b3b82ec02a10452ce6c3106eb7e", @generic="9698449483393a7f32810aa6901eab2cc9f0ca68c6eade14914fa7c09b8fb3d53ef544e3f4a8422d98094d0453350fa1e69986d5c0ec91388d47d8c901ac44d9cfda17627be61c12f877c67e7c3e56ee1fdbb7094c7718f69a8b5569e2423847a0325755e3524591a50208af3c3c3fd42f2f27ff50e9dd81493a4e170fd2f9666fa3b5d07694ec094986cb8f9ca4728e7e9ccf233caf960b5c74fa5d1096d14ccd5cc40115039479da3f4488a3782ad3811ba568bf549efbc719d52b5f1bfc83b63af6"]}, @generic="550993c051b31e76f8067211c390fe41920e5deec7a4b11a1c0e493a0fd854852ad6589c84f70193fe9f148186ec8b1d0e24a1084528c5495736ae47881e92c62af9d04de9c296878fff70b80d67a2019b5ac087955b2a51f83986353c5f6acadfb325e37bf47347762acf0543598f47edcd5d7d32e02f26d9bb02db651c9b2d9a42a9b54785ce8e9647b7eaec9e9e34b9a2378ccec232c854089db6ec2c21179b25bc542f5d6fafd0022b5fa06b4ddbc2052c645840c47e21e82881ab9becd37adaa13600a6c691810cc1f78c1069e111", @typed={0x4, 0x65}, @generic='{J\\', @typed={0xc, 0x62, 0x0, 0x0, @u64=0x6}]}, 0x5b8}], 0x5, &(0x7f0000002e80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000034002300a8523f6d6533df7a6e18c407e57ce1102174d32a39381810d26bea4da71d1fd75561169add6cad52234cf39c99facad070d649890242ab579948c453a54228f8b8eb60ec49a4b0599eff7b2392", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="c89c05b7f2a21bfb9a48acc03c5426ddbcb6f218841ff00fa3c1b90ca49ed8ccb7e9d1e8ec8287176f0ca60b1551a662efdd7170ed9db3f7d819450196a8e16505f962739b03ce0f5383d8cfcce93d166f3e14a1d122e45fdd2c679f195b119674f4ad3ea5ff345d4e54088dfd212fb34face516548ec60823e7f6d72b4404dcaef93d60cc8586194e2597c07ef94acd9244f498bd2adb6da5b12a7dc0933071e41a555c9f7819d292d35c0d2821cc3baa9e6020bcbaab3bd5ba4f42b8a3bb1b6e65bd2331ad57f5f258f580016517831efa10141c98a10ea8ffc3230e055447ffc85755e311ff4bfa158ccf1b57ca621fb2f0085613435b58966d44b160a59e79d3d55176b69a5b7f6df2d65d9a3be79eb71f3ad75ed82baa6e15ce1567e76a04762e185bb5f3057787897fd6ab0cfa9b11caec942d804cfd4778f8fffa42b4c3d7cda2536cad88dc4858e08368e9a42470bdb67ef9364e9fca0ac500acd5aab4418c46803aa1b7f223418616a692f219732e2dba45fdcc22e9394a520007b12836c67ca052acac3625dd446883424a3d076f892314c05ab3974ad12f0be40e881a574d73669de9ac9f490359d48e5ec8e517a8dd931470ee690663e8d7c753b34f5e2e43bf35f5981ea000136ccc9500a10ff93066c763b97d88047dc827c03e4814859e9570605f21a6f29417495c570c94e07afcd5f113d3d703d93d8e2ca7126df0b0a852b1c08b76e8b3ca25ac83f6b5e572ea89c594b78502a9c985888ebbd6f68f39757208161c68f1625a8304fe40ff8832fe7d08b932e0181e70609fde3ac3a5808d6d95a2f8d196ff76654615d829215660dfdc8a23e003f83db1402928af5999f4d0974c8b4719268a9161a65a116570494478ac2fe524ee7349dcea5c1aaf415d6cd9c8f54e9bf863f78f99a7b31a544984c57c2773ed4ae84844a07b0a8df22414dd8c6717bb6d22534c9dbc286f57c57a15133f625e6a6b02527623bca712f062c4f6f70484178b17009866b3bd09c758dc8ef6cb4418487b8e3e02dc7fb6801588503d06fec895ba0432e1d2b07a0315128a9f6686c4882e77ac69345993ce67c46fe10025a57839ca073329aa5be3286b10ce2e8b6ee594124119e693cae07b1d8a378768c14ca3839fcff28e31471e72cc3a2b6d45a9594c5c532410887df89294884e38e3818f128fe690d6e9dbe50403e7a9323c9def391c664ee0bcb2e04dce61807b3fdfdb695f64000e31c49f3fac1aa1ae01918e0790bfb6c65976c1cb012b059131e90e5ba6d7f048308e5bb351c0f549ddad27ce5c3bfa20c8dc26cd1e5dabdcd6ee0db90156f903c340c3dee85267c39018d695d9e33c62100eb89e56995509f15d847581a3de02a4df124cfd4149048cc9b34ec615060669b5fe7ebad35f4e87628683fec725f1401134add3226d12e2d71ed45c8054394d63afb45b8df83a142351148e5447c76d03bcd0cad3c9d8ecf92b88283676e9e0517b460b11e29b5804e635223a494d5b2d99f8a58fb54f90818aec97246e87fe91a73f18bfce42b7a20166e13dcd21e57991cc6a97628cc60f28a2807f9739299a9c717aeb9a7358e821e5ee02d93869814797d2d10a4900c86e973f55f43983a4cdb65c150b030985968c488f47e9c4d67e7afee24424019188ec956a7c70d69d24fdab2357f4bf43f33ca6865d5181a7b8b1f0ff60a319882f36e2b0af93f794d70f6a2f6b8e4d22797defea49adac558765cd3cbe447c3b396fd29c531f6011b9db414cdd426783584df57a2f5a4fee7b7aa62dc0a936cfa726ff0854171554efc014eaddda343523bc9085f0abffc879c3f3beec62a51676c7374bfc59b8cfc7b3c8ce58e16304fac3eedbf380b1392d0a3dd755fae3d4932437feba00ce71b5ea36ac8d7ee54a86bccd6ad4e98b14a431df7e4592cae51aadd0159660f04d3d00ad6abd0704ffd92fd5aa2af21d5105ac3fa8770959ecfb62ffd595a319e49fd1cf5a3acc95a44b0d6732e42581a11799f0878251ac63d1f2e06da0cf67bd6812034d1b27a591a418d32640664cbba127e455559392af7d0fa3f466190361f48712707aa083f4f18e9be2bee15797d484290bde6d20db2a0a3ca6b1a2236d218890d3cdf02d8b96e046c3e583aebbc50a9c3695bbef8e52b489f09af73676bc99d8520a96984389a87cf90b1858d833d7127cae6df20bcafd9fcde800bab766d05d49c7debf2a8cf86a164da139cb1bc5f411d3e5aa1752c1d8f5e25d36afb7e8dd9c25dc5d6a5791eb5deffb11021e890ca3bf7055041fe33d21a3224d3ac900bfd7b959b61bfaa80218dc0364ac1e08d47742a901308802664b930a43989811bd2243cf0d3f221d9d4922f1d1b3dd456085a9ca4d1f90e332d6b9e3b728e12f58bec939f4adcab330ad8e8649f889d2aa65d9e137cd3325986a5f6a00e82d1b137ec9ad7cb3946b127c2dcf9b4bf9c7591db97b68f18b31e48f1c4285254d309a350ee7f2b7687299848f7579a1e8206bd5f7ce81b6782b4bc334bb21d2b8712ef42b54fee2cbf83be6411b9fef27ac9939f5231fc77a6b582c8c03ac30e79e077e0bfb906c88bae8e97a9456411c340c1c8d4419f9995f94be35aeb3f2a65d11d2543b690364483b084f314bb12a5e159e465cac0490579a4074045000c23373ea7ef4a579c0b0682dcda3ebc7fdbdbeab3a5e702ce332f4ff7195d32b60e6d72c58a5aefbf477de59cc444371a3d5e8131c27a3a164591b5849f062879d14f1ee038e14d4db5e4d06bf45f75b5ac0ae9e51941f0e5b9ac8c60e7ed386f9363d676ddee110fd08cfc25d7cbb06946dc48a88229977169440a72047b43b1cc82193e94e1fb3fff363c9b49ee39cbe3db71c87bb4bc3aa48e03a54f633e1b4ec6d86fd9d6026ce4b528b298077c2fa9dc68387bd037cf26eeda100457d94773a1d13d979181056164d170de49a80b511a9e5eb2bd7ba76c561998b9d0277caad08da0cbbcfafdae0227a41e46978fd4294a68d43cabbb7ed38d6ff86a8074b03b02035dea035ac0d50a558ccdd84d8d5b0225771ff70765f7d502e875b51985b068589f988fd244e4842a0aa60eff055f8ab1102bc00bccc6cc0b602f4fb5981720ef07a91fb3350b60a535bf28110aab7b15e589334b7197ff1290d7fc05c199867f707b01ab75eb2a5ca722bf18fcdae7f116f0e6912635463cda0155418528f08599562bc94b4dd6399f1fa92807d4dcb5e376eb09731c91dac6cc6c5cc17fb80567b691577daf66ec09defbcb45e514768346a934b66b5b1f62a68a4de0d1c8f30047198e704eb1b719c90765bd057d68e416ba4413aa56a599209e7b04f46b8cddde23f2c104af00f043eeb97368200a88e7148db25a4563563b622ea2b36bffb8c2695b4f3d47af19f76d0b4e43ca64354a51ba00539dda805fcc422df54bb1de7dd882a5e49f7e584c97886a57794c9a3f3225cb90c7ef0549d074c02274ce67a052149f8d5bcf202b41f596f1fb86b9c7f2252cd902b0fa45cb5b4849435a503d153e41f464d9414d47d7e1ac5d2c66833934cab5d243a9d9e8bd867f90624bf6b02e0f0bd21a71012b9290065ac30fd37c615b00c2653fb7898a6726b515a720b4a0ee4388862a4c721867ab54d15768ac4b03fa004ed9424e8f3f1c6bf264a45689c1a29132eb230fd11a398a4b2ca7c872d28ac0b6226d7ad3f7d644125aef56a97a5035a083d2fc825676bcd7418a18c880d4a9ee742e6f2d705bd809d08b440942db1ced6ac26b1c0b0aebe7cff081803a194d5c06e33ed0ad1f8151f5c65fc31ee1d46c24385b1d6ccc53fe7f5a2544d8bf7d495e8fb94258f7f834f9952ce027e334e625acc9a49e0a8b490b035bd0f81ced5439a0a00220a8f55970bd22c2fa373e9f7ec28348b64a6eca6a47448b3616f74d5ef666cd884a04fcb4f6558e194eefecf9b8c8ee1d1120a08e1c028cf4db174239c0c6c3a9c0f5526c1f96b16ccbb6082467c89425e23c9a9eda7c3638ed66196e165233a1ee2ad54c590422363e46a771886b4b5a171d72e34b458cbf17df6b444064850a0acf23a1486113c0a8b45fd5cb8572a8d49c278945e8c9b60c2b0c6cf02fbdf21e8c249dd2e18677e7b0b3cd6fe9b51294d25b4089c00a74adea7f83f5105bedc40dfc3ed98f01deebc067150e58fbe62a887578a01a736d65876d9cb2a35001c84921dc934cf65977c06d9d4d393caa88f2811c1e12df3a7d469b1187db7c5809fa341b646e9b0e3fcc074b96bbee55eb0d3a93d26733168811ceef4b14b14df20c4d4842c9fa7fc5955f89f67ed124f1969f2bf71c111ed12de526ca2d890081df9850e020920a409a376d8bc66dc5a547af2a5e44b38a7f7ca04defc310dd793c8cd7b408be2a9db6b766a5fe33e00f0a8158858dcee80881f0815a45e1baea795979937944988122507c6fd3049b54ddcef72db9cc14831df4176f45fc995dea33583de6d71d4e924548df08876956efd38d4a2df580782699f60bef18d17e87370f970381bd05d0d59293d62a85780f3aa3f75c518cafa1e2c48fd240d22a3ce354df5984c3a3061b308934f9d6ceaf8abbf56bddcaf366448bfc7ab9887282d30c601755aa575ab15d7c93d68743f1ca349cf4a8b45b9bc2fa8a67690de74cf300f3957614faf435f73a68717d91f07b976d87a2b9ed1ee3df3338d7c91d36803448d7440453c74391f06ecb939bdadaabacb128bee7a4c3d81d8df706cafeb85c5d113efac90efb72d138796b3c33a6d42c4f3ed521db15adcd73868de4fbcf77ae03a71dc7f57ba94a4852f2eb9b07758c207e2fafd36c2133338cc590b739ee8ddf1687da9b326bdff37bded5f8890dc4641fb48357f06b9b12ba65842c2c2c917c5423d72f98125157493feef17a824513c2998c7115160728d035449bb083151b2cfa410f77be5a028b156e41b6294da91f90eeaf630b6047370852e34d6dad8bd3b57bb723b475b18d4e5addd35cdc6a8bf394c6dea66dc881aa953030a3b39ed39474b2a0d143765d83865cb5a31b66f2dbac5880e89a9a7a49c6c3cd1ee453d12a7a5aac21086fd360bb9e52ae572811b15aeed8db6d6cc6d59ddfe64f0a47cf688afee06a940be3e20405929ac38037c70c87ee468782766b67798bf99e16bf046a71550c2c9e9878148417b693cf22883bbd1c45d6d358e4d273ebe7a62e2aceb9d730e7e790f9320d3fe19823416986048ae9222ee0c0e51b62d04d16729ead7b3acea659cf02b9601584a1ba50546ca5c7a0f268430223b9387b1e0b99ac53cbeced74f90bc425030382de3cd12fb0083516d6f4469be8ff9199f40014b65e2333e84213e7a09df83670878b930c5bec05ad3fa39e830bd581dd6a606e1791d47a69727c985df9b9cfe43800052b7336678730a3844877c069b194fca02aa5e1c7990a2d947148e9518fb28ab21ed480cee6a89bc1f855f39eaab2b5bcd2691c0c4c557f33e40ad758048333a2fc1af44de96ad1fd09cb2f0706862039a522bb327f28bf0900185be300e97140c0ac135e4098350467b5bea4b8609de7d3764f8f4f1cb49266e4bfbd1f88a8ceed12638daf5e75ee97c430c59c3eb9524c22950ffdca5aa84c0d28c236fc8c5547b08880e88c19e05ce7a52f9d22a5517e2c522170fb3acb45edbeb0bdf73e79b95c27281e20b885c154ec4cf210ad43690a4b4aa0f6ca702571d178af5e681fd939b623af8364ce5d34ba14630203efc6d38b84280e86ecce620d4014128e22f7a", @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4014}, 0x40010) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r16, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1410, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x20004002) r17 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100009ce608f44cee99f6ca86fea7ef72c63e45cf75ed249ea687b049c1abfa5d9614f2496eb92316777a3c3b99cd585d1f976295d6a678535eb285d817e6874ad244d10b6009e830f53b9a1f4d291bef6705b8cd9e1a0f64c5b6c3934773b56488a8c6334b524c896df6f36f3c0c2f784e718d5f54d000"/150, @ANYRES32=r17, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.259729534s ago: executing program 3 (id=1479): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0x23) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'veth0_vlan\x00', 0x200}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0x100000001, 0x14) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.218353615s ago: executing program 2 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_channels={0x3c, 0x7, 0xe, 0x80000000, 0xe3, 0x14bab007, 0x9, 0x6, 0x4}}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000007b4b0000000000007b4e40020cb3b700aca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000002e00)) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x80000) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$l2tp6(0xa, 0x2, 0x73) 1.035597112s ago: executing program 0 (id=1481): unshare(0x10040000) unshare(0x8000900) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) 906.993231ms ago: executing program 0 (id=1482): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x134, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x4}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78b1c1ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffe3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x5aaa221a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x134}}, 0x0) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 856.885345ms ago: executing program 3 (id=1483): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40000) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002907800000000e000000211009078e0000002000000020100000000000200"], 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4200bc}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="a400000002020500000000000000000003000d0406000740000000000800060052415300"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r2, 0x5, 0x9, 0x8}) epoll_pwait(r7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000180)={[0x1]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) clock_gettime(0x4, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300010a0000000000000020000000030006000090000002000000ac14150000000000000000000200010000000000000000200001000000000000000200000000000000"], 0x50}, 0x1, 0x7}, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r8, 0x0) 754.391109ms ago: executing program 4 (id=1484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv_slave_0\x00', 0x100}) (async) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00da128201000010000000"], 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="fe000000000000001c00240017d7d613b0fae72cff49034379c9505aa32c8ac1d0b990c508001b0000000000"], 0x44}}, 0x14) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) bind$netlink(r6, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xffffffffffffff04) (async) socket$kcm(0x11, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="76657468315f766c618a7c30007c32732623e844069a0f7deba34ceb44e3080e1ee76780dd0fe2f7dc9bfc6c873a10c3e6034a0878b972eb3d184de5dc03207d3da3a4c428f99c7b2c6600b4054ff440112f8cf558b126f720ac6d8ec46b722d0ef85a43f2d52ca8c104807118fe44e606b5af8839f9b553ae6d82230465e99386204a03d4d360c0d0148f84af5820244203eb4e297b39c9dcc118e7c7460a0ca0039ee0ea629d162846b2a105aa5eff27b289b001e16f60718e9c180e91394732dc4ff782b1e7a1ffcd6577"], 0xd) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d3ff0000002001000000000000000000000000000101000000010000000d00000000000000e8050000000000000000000000000000060000000000000001000000000000006a0f000000000000040000000000000005000000000000005a21000000000000020000000000000009000000000000000500000003000000ff01000026bd7000063500000a0004c22900000000000000"], 0x1c0}, 0x1, 0x0, 0x0, 0x44814}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) 699.853982ms ago: executing program 0 (id=1485): unshare(0x10040000) unshare(0x8000900) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) 682.397238ms ago: executing program 2 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf4, 0xa8, @random="c2f6c4290c9c57343d674afbe7f469ec6f9d54174b238c40caa6d984ce95faec26ed5b5ce02987777d8e02c3282eb1383f74ee4422e8c5c6c504e750beac08cdb47bdbbe05292d843912202ac0002a7bf396522dd12fa231da3b888df5738a9300f65b12a529937f1e4cce19539a2d453d4c9e02d90f26369f21c9a127d6eb97dd43aaf5b626f173f6e5c206d5752949d6029881329d27f7ccd23b815530197585b089850acdbf93369774708d841d113aa5bb9b68d947fb38e77ed3e7e609ce7e471062be4d5003b5f25cd36f9e2eefae338d2d16689b59648ac4e3a3c98dbaa4f1482a4b0b511d7fd6e1224f4014e2"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000004) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000300)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 591.488838ms ago: executing program 4 (id=1487): socketpair(0x2b, 0x3, 0x49a83d08, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x42020000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffe, 0x0}, 0x8) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x2, 0x9, 0x7ff, 0x401, 0x4, 0xdcc1502, 0x66}, 0x1c) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)={0xa0, 0x1a, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xc7, "87732fa245fb4d0bf454289d5f3a097beef14e0435a24ec3eaf53e753b25aa20785c6dd69f75ef861ae609ba7ecc2d0e601d4a358a9015448fbc496e4fc1edb1324a8b38f5580a7c5e678e1c3578b85d79321991b952b3ccfd3b4f6a1a35358792218b85505fc0643275c561e4a5cda79a4f0192b3b9e2987c91c9e9435af4ad576727736d5d120da02ee1df10da217ae141ec8ba3148d89507d836d5a56786729436ceee07381197939004f8f0d54ce48388869bde6c76e5ccbb136d1a762e2f113a3c87e53a0"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0xe0) accept4$packet(r0, 0x0, &(0x7f0000000280), 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x2, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x4}], &(0x7f0000000480)='syzkaller\x00', 0x3, 0xd1, &(0x7f00000004c0)=""/209, 0x41000, 0x66, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x4, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0, 0xb9, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000a80)) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) r8 = accept$netrom(r0, &(0x7f0000000b40)={{0x3, @bcast}, [@null, @null, @remote, @netrom, @default, @bcast, @netrom]}, &(0x7f0000000bc0)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c00)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000c40)={'nicvf0\x00', 0x7f}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x90a01, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000cc0)={'hsr0\x00', @local}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e00)={'tunl0\x00'}) sendmsg$inet(r1, &(0x7f0000001280)={&(0x7f0000000e40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000e80)="5b29b95aefc4f04880856d44e9a725309f72de5661887685e89926437ec514358ae4910a8d68897a791dd7703e0ec867ff4991f3ee3050163dca48a68ebb329d8077a550dd3da7d880245a73c737774b6ce1168645a7", 0x56}, {&(0x7f0000000f00)="1e5284377910978cb57385bba77dd45b7f3e210203a244843c99ebb89d13b094961da6e036195229d30934b1d83d3d4821dd89c6acd8543da5bc5afef4cd1ad979f7b5542ce91858ffeb76640c43844c96fcdc28c24bddb1deb90fc82f2f32e7bdcbce722e7b922f94106be4edb8806483f624a0ef18998eeb74aaa56fdfd8c63cad7eddbf7d3727f970f20f67894b5154b8d41c4913ef41ed4016581b5cc3606922db98a43cad32686818cdf9f88b3fbba5157baadffc20cd0bcdd03b38574436439792e5", 0xc5}, {&(0x7f0000001000)="86b1f0e5e7031c77c2829fa00ed78039ac58d2d0355e8aeede692aec3ef462cad20fd0b11fa646e456b31e9243e87a77ca8c48c7457c", 0x36}, {&(0x7f0000001040)="f9740fa75965bc67ec2594a14c80cb2829967ff3cbf5d906358740ede712430dd885", 0x22}, {&(0x7f0000001080)="3b9fa6836659ddc83a30bcd038be12ecd3a8e148ba74a29ca0dac7f8160179262f06d42ae244c6a81cf1a7dde857ed10b58c52aa0a6564", 0x37}], 0x5, &(0x7f0000001140)=[@ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x30, 0x3, 0x6, [{@multicast2, 0xffff}]}, @cipso={0x86, 0x21, 0x0, [{0x7, 0xc, "761e73e42bcb087dbe0f"}, {0x6, 0xf, "3cd327ec61abb5219564d4267b"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9ec00000}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0x8, [{@private=0xa010100, 0x9be}, {@multicast1, 0x4}, {@multicast2, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @remote}}}], 0x138}, 0x4080) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) sendto(r3, &(0x7f0000001400)="b11a", 0x2, 0x800, &(0x7f0000001440)=@phonet={0x23, 0x9b, 0x3, 0x4}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000001540)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e20, @local}, 0x2, 0x1, 0x1, 0x2}}, 0x26) 585.781603ms ago: executing program 3 (id=1488): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffef}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x401, 0x8}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010000000000fbdbdf25250000800e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000400)="6e892c82d7d81ab7808e183274db6bfd9e36093ba30adecb38089383241f164f20510bcd0c6243e2f0be220cf59aeb1ca845b685cf4d3ef20e24811958a45efbdfc4f055cfd26094e208afc8fe2f61a9bd57d75077c870a487e5f59fa582787e2a96c198eaf248309a2742f5a1b50a4e25fdc2ef4f64ce2839d960b4c1a7524e2b42ea81798f0bf9bd5599949f", 0x8d}, {&(0x7f0000000780)="fa30e6f3072d6edec093c837b880456a42825c88b53f4e59f830c85c37b23502e392c6e8caa9c8cc645fe47de66d2c896879449cdb795791143c6869568b1d43b9a027d331810eb76593874e7297671a2033376e4514d1534e9db29bba7055c09d96b49b0183c61be6105f8a6119896a89a785790689c068b28ce80053408dd061c4c390efd0c42c78ff970cf9f72aefc93ab8d1e069d4773979f2c99d12606eb2089b7c27151adc41033a641e2596830df0afac11cddea5261e48a366fb52031e114a28ec313d6401a0812cbc2e6b", 0xcf}, {&(0x7f0000000880)="ccb2597796e12835358217932fa9fa56e42b46395440db43805b93be312f0f16404c30e4f75faa6522dd641ae4afd901eb2bd64b1e40f1b9e9f401fce82aa92ed8ccae34412fb6439620b376d1b86d9f4f3354e72ab3562f0d1bbb4c1ac1e237f4b34dab02ee29caaa5a528425e4e08eba703e699a533ba7bada47e46766b9cc62e7100151237ead1d27055b4dd4611824612984537a01f8cf051f6ad4ddf2612ae84aa30a7fed4121cb6ebc562423e3442a9c347187cd4335e06d3cd84e9a0ab22f921859464961a6440808ec06414cb7113aaa0221f1ad8d418a3fe6341cc785e103248f107d160346bd06d3adc578174649064c6c13", 0xf7}], 0x4, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 407.32047ms ago: executing program 2 (id=1489): mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000000, 0x80010, 0xffffffffffffffff, 0x2a1d0000) unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) unshare(0x20000400) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000240)=@ll={0x11, 0x1c, r1, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)="a28017f7dcfe9dc8385629983a66ca6abdd3fe498da116546e2ed0e34c9d4f8dcb8af4e138e450433c43650b20f8df6e7ed23a6b2a9b1c23655e3b156dc2ff726098c2e1adcabaabc0866df808932f6cfed7523e860c5573e223cc1b7b064b0b9f7a914c6e63e21fba23a3fd2ed5c89953c39ba034ff9e73a8d0c5ffc08c1829c0f8013c608e64ee0a072287d9fd0ffb99b5660650c70d347bf4d65b89e623c1e86f1c78f1f94e2d8b89b23242ad7ae866321f34e81e4a37c283e1b7b6635fb21b41d41a29d6e7c102ca96b912a352e2f8f2d687ae055ee018a968f8aa04d366b94afe3bad8acf6a72c0b07113184de90b", 0xfffffffffffffd63}, {&(0x7f00000002c0)="0ef28fde15a443124e56d798b4bd43cdc482b43db7ab8d62", 0x18}], 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x100}}, {{&(0x7f00000005c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)="d6ce92202a5f4b1a172a5ad0eb019e68", 0x10}, {&(0x7f0000000500)="cf030cbee19655d180a472e0af95217f17dc10c18bd17d", 0x17}], 0x2}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e22, 0xe4, @remote, 0xb}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)="6ee225e54a6910edf7d71b75218c114483833f44c4caebdef91da66275a08179febf4fc371bc44c542a85a5197bf9d8caa4942c24781e7fc9127fb773964f487258ca5ff15519d384d18b1becda54685f79deaa6570f920f6ed6190736dcd48ac008d8628b16a9a99f82b363883e3e976e52f0171772bd512e194faf058cc18f5c6125c894ee3ea0b9b5026c4c41bec6632a7a1a8c4e8c11882ec024d44122628fb654bc3ce9a02e362e210654a30c17017d76dc7612bf1bc83f7602199a99c5d084e838c9727af98fb5f30297c044086b90a4e3f84477cf0c09787de4511a044e03dee6e67a0e43b8ab3d7be73a374f9599a58beca9bb3c", 0xf8}, {&(0x7f0000000ac0)="ff03bd31ee7e1c11a83525a275e4a21bc9540bc320f590c1b521d3ba92b883e63fb396f4e1b8bef89ff6798f65a369982b1d5928b38297871f6fc2c935f74e3f48f014cfbf621efa3b7dc49678c002ef", 0x50}], 0x2, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1228}}, {{&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x0, 0x2}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000c80)="240026fabfa36e1ed1a824251486029cc058758d444257d34a2d2fc31cb4e36769bb71c429d6f016b935d5fc5a88faa1269ccf8b75bae664a62966931d1b7b3d97634f2791cc10c5", 0x48}, {&(0x7f0000000d00)="b6e917c664591ec6d2e56e0f68758153c61b340a8c1fbe98414075b3743768af72e6491a798cee4ffc0a59f38dc9c59b8d287cc39168bd437ac1be64f71a6a6b8aa0becbd320b22fd229d0e444e4be84b1afa488b01fc3578606a7dbad1a2157f389b658d9bad54e0e8a6a50fbbfd7d480d7ea68e594c4a265f9839285ef12c0eda263c812b26cc2678e75934ab747c978b7cc14a306750736dc735dd32723a836ad7d052c77dabbef1e715a5fd1153d00f3c56d5ca65e7e3cc982520e6a69f15c150f59a89c8b2d5bd83d23e4b90c09e0e6b5f5fff504624f73e66bb1baf6b145", 0xe1}, {&(0x7f0000000b80)="9e4e14f58b603ff6b13de1b5fe207656b11b88076e55799d2a6acc440425389a2440540399a169602c94", 0x2a}, {&(0x7f0000000e00)="352c04afa756cf", 0x7}, {&(0x7f0000000e40)="b24b3ba03283343e67243584b03ebfe0e243351a75a962c1ad6a6bb0ee885875edd369bcd81c7b105b283f3e8cda92edbe0de2c2d14963a1751422fd4d8d22a525e64759302597684b6fda6466267c0701cb64d4fdc349868aa40da61ee6d28c175e9c78076a1cf4b6b3b1dc7291bb72c3a0e2e624ee492f3fc220f519f3fc02ae70f87b5cd49cd9326d7932533d562abe6fff2074881350761490768b2d5938408bddf8cedfac", 0xa7}, {&(0x7f0000000f00)="613c1f54a413c1d2e54a766526ca647accb4bc6be56a649ef5dbd26d978b6ca204f8c433179075a3b889cb94b96d96f7e1f513ecee2f4498db228eb12a1ef165965405e3261e33e9cd47f60a04f981be25664ec33c108731d4b974d78e37c8c5071ce414cb0b7bfc786a644e3717a6d1dfa749da", 0x74}], 0x6, &(0x7f0000001000)=[{0x18, 0x102, 0x2, "3b3b64433fd993"}, {0xa0, 0x3a, 0x0, "661ea6a2b26ed8c479ba612a05ce33e9d033fc310e9b689b1f4b59a2f56a2e73a5a79b2f7b38331447e40d630017925da3283fc61ae12437052fe7df861e71f556334f1f69de0b4e70c5ac14025f7450c743c3e047922e7c2c0b79258a5131d0b859e532d8d8905613fe3e6c2a31eade841698aa330062b278a5ca146cb53903a118d73798b0e5a53818c8eedd16e7"}, {0x50, 0x1, 0xe, "ac2e72180c2fa1a774639dc661bf7911bf9a0dd19ce5315d498f16ae19228176987a98c31591cf66792c9e52bfa40b195ea11d4a53c227005ff5"}], 0x108}}], 0x4, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="4ed7000000c555", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008000900000000005c000b8008000a"], 0x184}}, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5000002, 0x4010, 0xffffffffffffffff, 0x38e5b000) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r8}, 0x10) (async) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="08000000370700000006000000005dfecfe8200e"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req3={0x8000, 0x8df6, 0x7, 0x5, 0x9, 0x2, 0x3}, 0x1c) (async) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x4}, 0x10) 394.126639ms ago: executing program 0 (id=1490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="620ac4ff00000000711016000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x25, 0x4) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x1, @none}, 0xe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRESOCT=r5, @ANYRES16=r1], 0x30}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', r2, 0x1, 0x10, 0x2, 0x1000, {{0x3b, 0x4, 0x2, 0x1, 0xec, 0x68, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x8, [{@loopback, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffffe}, {@private=0xa010101, 0x9}, {@empty, 0x3}, {@multicast1, 0x8}]}, @noop, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x2, [0x0]}, @lsrr={0x83, 0x27, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @empty, @multicast1, @empty, @multicast1, @local]}, @cipso={0x86, 0xa, 0x0, [{0x2, 0x4, "7faa"}]}, @generic={0x88, 0xf, "9c3be6542134b96ace6acef26f"}, @ssrr={0x89, 0x1b, 0xb6, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0x44, 0xb5, 0x3, 0x3, [{@local, 0xffff0001}, {@empty, 0x7}, {@empty, 0x14d079fc}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x4767d6b3}, {@multicast2, 0x3}, {@private=0xa010101, 0x4221}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}]}}}}}) 335.677979ms ago: executing program 1 (id=1491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@random="fd4000000800", @random="24475466a8f0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x2a}]}]}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x2e, [0x8, 0x3, 0x6, 0x7, 0x9, 0x4, 0x1f, 0x3, 0x1, 0x1, 0xfffffffc, 0x8, 0x40000000, 0xffff8001, 0x0, 0x8, 0x8, 0x800, 0x3, 0x8000, 0xff, 0x7f, 0x4, 0x3, 0x6, 0x0, 0x7, 0x8, 0x6, 0x7, 0x3, 0xfffffe01, 0x4, 0x8, 0x6, 0x0, 0x9a61, 0x9, 0x80000000, 0x793, 0x2, 0xa4, 0x800000, 0x1, 0x3, 0x12, 0xecc, 0xfff, 0x2, 0xc1a8, 0x10000, 0xff800, 0xf4, 0x0, 0x3, 0x2a23b1c9, 0x8, 0xfd1, 0x28c, 0x7, 0xfffffff7, 0xfffffff8, 0x4, 0x1f0, 0x7fff, 0x7, 0x5, 0x0, 0xffffff9c, 0x1, 0x8000, 0x9, 0x3, 0x7, 0x10000, 0x8, 0x6, 0x9, 0x8001, 0xfff, 0xc, 0xae6, 0x9, 0xc, 0x0, 0x4, 0xfffffff7, 0x401, 0x6, 0x80000001, 0x58, 0x0, 0x0, 0x6, 0x9, 0xa, 0x6, 0x6, 0x508, 0x8c0, 0x7, 0x8303, 0x8, 0xd, 0x7ff, 0x1, 0x5, 0xfffffff9, 0xa08, 0x3, 0x3ff, 0x1, 0x6, 0xfffffff9, 0xffff, 0x1, 0x1, 0x4, 0x4, 0xf6, 0x8000, 0x8, 0x4, 0x96ea, 0x44, 0xe, 0x3, 0x3]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x24}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 249.94592ms ago: executing program 1 (id=1492): unshare(0x10040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) 240.715634ms ago: executing program 0 (id=1493): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "e02c179a84c0e2e80f95bc82fd6e0e4ff274df4ae2ee92f6680d99749d27a439", "4a65a99b958aa4cca452011d35eef32b", {"94837a326f05cb8422720228290ddb99", "ab4750f241b21ed2ce4a61b96385e0e5"}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "721d9bdc2c34e03e2025b88f2e78003633fdc8fdc7a457ff863554ba8bb649cb", "9d0160d3cc4616ceb499b5e7ac28e713", {"806381fad2233a3727c462c33c53fbdd", "42b1b39bbb1a88706a4cd75c7e30f881"}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xf613}}, @fwd={0x6}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x3}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/89, 0x83, 0x59, 0x1, 0x400, 0x10000, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x7, 0x0, 0x8001, 0x10100, 0x1, 0x7ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x5, @void, @value, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000b00)={'gretap0\x00', {0x2, 0x4e24, @remote}}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x17, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x806d, 0xe0, &(0x7f0000000200)=""/224, 0x40f00, 0x49, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x69e7, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000980)=[r6, 0xffffffffffffffff, r7, r8, r9, r10, r11], &(0x7f00000009c0)=[{0x0, 0x4, 0x2, 0x9}, {0x4, 0x1, 0xa, 0xb}, {0x3, 0x3, 0xd, 0x3}, {0x5, 0x3, 0xb, 0xb}, {0x4, 0x4, 0xa, 0x9}, {0x3, 0x3, 0x8}, {0x1, 0x4, 0x2, 0x5}, {0x3, 0x3, 0x7, 0x5}], 0x10, 0x3, @void, @value}, 0x94) 171.052855ms ago: executing program 1 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x3ff, 0x5f4b, {{0xf, 0x4, 0x0, 0x20, 0x3c, 0x64, 0x0, 0x7, 0x2d, 0x0, @remote, @multicast2, {[@end, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x1, [0xd]}, @timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0xffff}, {@broadcast, 0x8}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010004b0428bd7000000000007a000000", @ANYRES32=r1, @ANYBLOB="00000000804805001c0012800b00010062726964676500000c000222ad566abfecd3d6ab5b6c6af76ae38008000800810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) 95.561727ms ago: executing program 4 (id=1495): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r9, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r6, 0x2180}, {r2, 0x2}, {r5, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) socket$inet6(0xa, 0x800000000000002, 0x0) 67.085396ms ago: executing program 1 (id=1496): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5c2a99d37a49a8bd95bb17b2f1b7b60e854fc0a03eeb310abde9bac2a55b328e57f42a87b6c7b93b9597fa49512f8e05bccbd143a527aba89580a02626ed2bee02cfda914152b4c8249eb1b2ca76dea47dab0993"], 0x40}}, 0xc8c0) sendmmsg$inet(r0, 0x0, 0x0, 0x10000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@alu={0x7, 0x0, 0x5, 0x3, 0x3, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e7c1ba31376606e400000000000000"], 0x48) r6 = socket(0x1e, 0x2, 0x3a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000500)='nl80211\x00', 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = socket(0x840000000002, 0x3, 0xff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0xf0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xdc, 0x1, [@m_police={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x27, 0x6, "c310a7743fb660426a8a1fedf05d761c27d5f6fecd2f449f4639a33a1fadf00194cc8b"}, {0xc}, {0xc}}}, @m_gact={0x84, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2, 0x0, 0x2}}]}, {0x3f, 0x6, "ee3daa2770a46e672ed42efc279eacd5f75e0000dcb3d695a2eaefabab0435f53a73381abdbce9ecf2a6300abc24ca9e3507d7209d83fabb0b731c"}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x84040}, 0x0) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 0 (id=1497): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf5c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85a", 0x62}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=@newtaction={0x20f4, 0x30, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{0x844, 0x1, [@m_vlan={0x74, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x47, 0x6, "f325b9d0e6aca343fac788a17edc6cb9589a6ec3fd8969930f95561da91189c1a5affafca724620170da198a1de81d3baf8bb10c1a2444e15ba0c2529e33607e44dd57"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x60, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, {0x26, 0x6, "42c25b58d245e7800ae3ead6eec8c71c8e19fcefed6f5305aabae307f9e1d431e8d8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x88, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x60cf, 0x9, 0x2, 0x6, 0x93}}]}, {0x42, 0x6, "8db159e881eaae54afda2b50f7622b966105d11e0e05193724148dd43ae39d41605696089d0e55b696c7cda86e04261dc34d59215630660352cfac867b8d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x187c30fd468fba60}}}}, @m_skbedit={0x168, 0x5, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0x8, 0x1b, 0x101, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x75}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xd9, 0x6, "e365f33826e4a7985c658e820a0804a0e67ea757946289935c974d6d46d1aae41b7a2d97a816cd5295d49f79c69a93c5faf8c0dbe1d0b735354133ea101a7810d64395ef1e5966aac771f427c867d0ec083844add87637966c66c2c2b3c8c0e1bf483ef4234d876e3ee12ffaafcf6ea4529cf99d045cf9c147a3f978856d382a666a6e6a94d1880ed834d57428917c15bd88d5375f646a9441f5e7dcf73f6e37c9c33254993a177d205afe3b5927226a9615c2e77576051332bbce443edff49f96d6a667bd812139f3dd86f4e65b234e55ba8a86d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_connmark={0x58, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1c82ad6e, 0x6, 0x1, 0xa}, 0x4}}]}, {0x9, 0x6, "657decf9a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x80, 0x1e, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x9, 0x0, 0x9, 0x1}, @dev={0xac, 0x14, 0x14, 0x3e}, @local, 0xffffff00, 0x1}}]}, {0x2f, 0x6, "02ac17861efc0d59de372fd43f0a1322afde8ae91e806416eee368468a07961f910faf10031cd97cf86c45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xfc, 0x12, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0xe, 0x1, 0x1, 0xb}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd0, 0x4, 0xffffffffffffffff, 0x2, 0x4}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x75, 0x6, "8287b6c748026a14d0dfeea3019ea148cbbf29aad09ad803876aaab962eceac57ca68b1e97ba503366019014c12030e77a7f4f6298187d49e0b0d51ac0f67712332e61aa1d1c6c19192f338492360440270cf319525752097ba146b423d3b0f14c162b3c2ba5d9d8c20a640bb53572a727"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x194, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x5}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0xfffffffffffffffe, 0x8001, 0x1000}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x5, 0x20000000, 0x92, 0x10}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x1, 0x2, 0x3}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x5, 0x7, 0x7fffffff, 0xd}, 0x7fffffff}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x7, 0x101, 0x3}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffffa, 0xffffffffffffffff, 0x0, 0xe7}, 0x45}}]}, {0xa3, 0x6, "67fc64210f3df59c20fe453a78061944e4f5bbe4d2081e598c635e5713f80346b0bac862f9d1e6fe6989ef7ca9c406b7b3f8dd86f7a51e7626054e7603d5616217b1feba1888df15e5af07926a3e2534a9018165a0bcbb64787bb9e5af59b0847adc9fcd7bcab2e9bd5a53213140c51530222cc164be205ac2a2f2ac094ed08e3d13d699588299c34d93822717c504b461c338a178edd2aa1b63d57fa7a9fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x100, 0xb, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0xbc, 0x6, "7284ab3783effa654a6e7895328135cc9c0011358db4bb13d864c54ac26a43839c6f5a7f433a4f4e4f59497a4c4c689b76f9c04f9f83bc4fb78b1d01d8b0bdcbe32ddeb98eb68009a36e6e30339ecfc1835ea3297614a21aedec293da392faf937490f82855db87b45de0d1fe210a68f784c996d33c4502a09ff616a196690805fd85a62ad5c7d0b7f4648f1fb4f3d5cf768baa5aac77c740810848f37d49061b20941838a61448d2a50557abbe886534a98c6fd9c30a42c"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_xt={0x114, 0x5, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x75}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0xae, 0x6, "4029c772c2ff46a020a5b900c2c741226d3aa164e1d53abbfddff11b1a6577490816739f96a1ae877c4d7e6c66d28088fbc72f1c871652d10c714977a5f9956adbb3f3fc88db4e0b404447e2ceb6b988b7d45253e8c6b82cbc7a2ed0dd60d7164595ae01fd2077a9ff1d5cd8adc78ebd8611744d093420c5e4337338c01de3bd2f6d5ab1a32ec548a841c3e24ea6e6e6e5636ab17e2f6de5967c34554ab66701804458ecc45c3f290a6e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x208, 0x1, [@m_tunnel_key={0xf4, 0x15, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xb9, 0x6, "cc2ef9c09bc535268ee818c2e83ee2a9e23fef1b96c976aa7e899a25d16d6d8688c8060fdbaf362b5cc1a4690da38af3604c8ccae9ddb98c662b701a46d170cb9b8de2d0babb57cf6adc272a30177e40a25fa2ee61d249c6a173c67daf6ab7cabd44890d67c12a7d767fe4715379d0319588cffd4f4d79c0244c69c47423c14e0d2595319cc0c03dc7bce43103a44bc277bd23dbba479c3378dce093a3d2048a105b780ccc6c1c97233a0f2f4e82ff768306a21167"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x110, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x8, 0x2, 0x5}}]}, {0xcc, 0x6, "f6d4efa096ac99996a18e35ae2714aedf7d021b492f0f05d2f18bc47f797abdcabc7efe8de0901149777adcce4f684600636fb7c732244f461c44ddc3a29d6fd4a35c7fd6d261ef71b5eb013011d965225b45bfa241cc1be6969d265eea8736a6c5a738844f08c25045fa96ae2a27c285d689affd6cbc3d9480928659ffed5f50ea2b8d097f4acbc153c411d48ef91ccae1034892a990f27756bbaacb60852dc78c0bfae495c5abc5e62af60d28598d811510aec902698440b3107a031dfb23a6aa4c52c71b8343e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x858, 0x1, [@m_skbedit={0x124, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xec6, 0x702b, 0x10000000, 0x6, 0x3e5d33a0}}]}, {0xc8, 0x6, "f63720cfcde6f3e363a9f9a211b80c76942d028e6ea171bbf6d50da722dceb25141e4bd83744253a3d77433907c5a4fd5985682e6453f2f4067f44f5b27715ee0a6e851919cdd9e901d1a8a360be2425d4d31143588b3b217fbdfea107bf4749f80dfcd89fbefca8d63a64a0a8d9b18718591c7f00cff4503f3d6e1801271800e7701722fd020f58f6c25e6660582eccda2f57edaba0d687d369395032064264446648bf8149faeda6afd401331a2a325bb7f0da56007aa769bed4a384c11203bf77fc5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xe8, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x1, 0x2, 0xffff7fff, 0x80000000}, 0x3, r5}}]}, {0x9c, 0x6, "45ab966cba40bc4603096f00bc23243bf55bf209332a64f4bcbaa07c00d940ffb9e3ee5e4df6c60e8d9bd6537b9e7ad30fe57e45cae7551fe973b00d3a1956d570e97d2a25c0fedaa6fa0c0e196ef1e3b103d15f806266431a597d47c4f36b3b4ec3c7825ea5262b77aa5152b99f256078f2f69829293aa037f540ce56c2a1af793fa3002efdef1c7ea661af37514df80b212fda6d105b8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_tunnel_key={0x10c, 0x6, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xc3, 0x6, 0x7fff, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, {0x5a, 0x6, "83f4cbb417753f7cdc8b11cb46f7244c01ab23efc445e4455e932c2128470a664606649c9fc2acab18e55f42ce08bd34d6bb1535e62f6b6c86780f614a9b99f9e74e5f750b068326e1fdc22e363e4508ed4438158ba2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xec, 0x1a, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "87f919b05bfb66e2198a13e854cb1a37"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x9d, 0x6, "c7d78a4c3fffe28bd4ed95cee3d9ce979e9e37919777a9c203d7c884d0c64baef745d4a405c232fffe09f1aee73bd101d367cc30ea2252f3dae845522e26e6b2f9716144609f4a7ac92cb4aeab7f282081cdd064f320da4c98b374d0bd61b2b1650948af2d5ec501086a99898813327b34cb3bc21e3d1cc286ec179e42302d56b4fae448b00c3aab0ae65a88f4e08f65814e0637d22619409d"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x124, 0x12, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x670e, 0x10000000, 0x80, 0x7}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x10000000, 0x4, 0x3}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x8, 0x7, 0x80, 0xff}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x10001, 0x3, 0x1, 0x2}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x45, 0x80000001, 0x2, 0x8, 0x3}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcfc10ce1, 0x7, 0x6, 0x7, 0x5}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x57d626b1, 0x94ee000, 0x3, 0x7ff, 0x1}, 0x6b}}]}, {0x34, 0x6, "0a9145ba741bc5a40a5a7c46c94d0d48e2d9ab147412534c37d2587d187a012767ebe4df61f2f3f468e9e2300339ba0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xfc, 0x14, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xc2, 0x6, "c06d32322d39a573bec2c4923abbb7e2e74093022dedd5a3c073972fd9c9f7b5102407866c72e24b86f6b0ecd1f26c48e9970e4a9619c74e5dfab600345d7163a5f4b5385fbfb9042a9dfd6b0cbaf7caf85302b1977895a4152ae760c7532347e41c8875cd0103a96f8810383a30e68858e77b87c249f0126af282b3b8d90ddb2994fe4891f94be4675635b6af615717757a0f4ab4c5f40d59bedfd788fb6d6498c257cffefe7c776ca7f22befdaf6c6aec6cf8b64e3702759b38e97e810"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x124, 0x3, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_MARK={0x8, 0x5, 0x86}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "fbb3cc39d22ba42634faf8da64be1e06"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}]}, {0x9f, 0x6, "b3fce294f76e6f5c2325f582b00c7dbcbc0c87ad4a132c246c0245f1cb358e34af4cf57b14967afad485ae5f9285ceb6658338f2c2b6e7c76b37d85329ccef4e8da4d53f8c892b3931cfd83ae98d8e4ba9b628ac1b1c1fd8f91c091d2252b90210ad8d9613254906a48087518e337fdfb1d8e8637909d46ad0f72543283f9b03b1a35fc7a02370195770f6a9fa2745bb58e9858f08dcc8d7a23c0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x10c, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x829}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x2b6, 0x7, 0x6, 0x9}}]}, {0xbe, 0x6, "2a2d42e78462ea928edb48cf4b3a9ec54924e8d1f3aa29bfbba30129a19c95c898b344759eb77874ef6feddd155a1141a50565636567fda601069f1c1de76db6d135564271a0a8d2cb228ad0017ee03386364edfcd24abfe087a3341c18af8ebd402d8e6f99b05a08021ff1ecdb6508ec01f4809b2815533f472b29b9b1608a729f7d99f6cb9109761404bf59196b4c1099036abf354ddbe7e885c9f6c0212a3545eff2fddf41daf00fa0917277c9c974a69de598c1520b252bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xe3c, 0x1, [@m_police={0xccc, 0x17, 0x0, 0x0, {{0xb}, {0xc5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xc0000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000000, 0x86, 0x2, 0x8, 0x2e2, 0x3d, 0x92, 0x5, 0x7, 0x8, 0x3, 0xfffffff9, 0x2, 0x7, 0x1b, 0x4, 0x5, 0x7ff, 0x1516, 0x2, 0x80000001, 0x5, 0x1, 0x9, 0x8, 0x1d, 0x7, 0x8, 0x9, 0x2ad, 0xfffffff9, 0xeb77, 0x5, 0x2, 0x4, 0xfffffff3, 0xb, 0x2, 0x6, 0x10000, 0x6, 0x8, 0x4, 0x3, 0x1000, 0x4, 0x6, 0x400, 0x1000, 0x9, 0x200, 0xb3, 0x5, 0x8, 0x7, 0x200, 0x0, 0x5, 0x1ff, 0x7958, 0x3, 0xdc1b, 0x8, 0x7, 0x1ff, 0x0, 0x96f, 0x68, 0x7fff, 0xffffff1c, 0x7, 0x800, 0x1, 0x65cce506, 0x68, 0x1, 0xb, 0x101, 0x2, 0x1, 0x51f9, 0x0, 0x7, 0x9, 0x51, 0xa, 0x4, 0x6b2, 0xe, 0x5b552dc4, 0x2, 0x9, 0xb, 0x9, 0x6, 0x25ad560b, 0xb, 0x557ea317, 0x5, 0x2, 0x800, 0x101, 0x1, 0x5e, 0xce4, 0x9, 0x10, 0x1, 0x3, 0x0, 0x6e70, 0x4f5, 0x5, 0x3, 0x6, 0xffff, 0x8, 0x8, 0x4, 0x4, 0x2, 0xffffffff, 0x5, 0x1, 0x8, 0xfffffff8, 0x6, 0xf, 0x7f, 0x897a, 0x7, 0xfffffff9, 0xa2, 0x400, 0x81, 0x4, 0x0, 0x1, 0x4, 0x9, 0x401, 0x0, 0x1, 0x0, 0x8c, 0x3, 0x8, 0xe, 0x2, 0x64, 0x8, 0x7fff, 0x4, 0x100, 0x2, 0x400, 0xc, 0x8, 0x3ff, 0x8001, 0x6, 0xfffffff9, 0x0, 0x2, 0x1, 0x800, 0x5, 0x9, 0x0, 0x2, 0x3, 0xe3c9, 0x0, 0x1ff, 0x2, 0x9, 0x8, 0x101, 0x4, 0x4, 0xcc6, 0x2, 0x7ff, 0x3, 0xa44, 0x8001, 0x6, 0x9, 0x2, 0x4, 0x1, 0x4c, 0xd0a0, 0x4, 0xfff, 0x7fffffff, 0xc00, 0x87, 0x5, 0x7fff, 0x6, 0x48, 0x7fff, 0x2, 0xe907, 0x9, 0x3, 0x2, 0x4, 0x9, 0x80000001, 0x1f4a, 0x400, 0xfffffff1, 0x3ff, 0x1000, 0x0, 0x755, 0xe, 0x400, 0x4, 0xfffffffb, 0x9, 0xfffff517, 0x9, 0x1000, 0x1, 0x58a, 0x2, 0x0, 0x6, 0xc957, 0x4, 0x1, 0x40a, 0x6, 0x5, 0x8, 0xfffff001, 0x7, 0xffffffff, 0x5, 0x400, 0x5, 0x11a, 0x6, 0x7, 0x3, 0x1, 0x45, 0x37, 0x7, 0x8, 0x42, 0x15, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x22000000, 0x1, 0x1, 0x6, 0xe8, 0x9, 0x10000, 0x3, 0x51, 0x6, 0x3, 0x4, 0x481a, 0x3, 0x8, 0x8, 0x4, 0x7, 0xffffffff, 0x1, 0x1000, 0x9, 0x7, 0x5, 0x0, 0x5, 0x9, 0xfffffff2, 0x46, 0x3e8ef477, 0x6, 0xea, 0x10000, 0xa, 0xe0, 0x4, 0x5, 0xa209, 0xc25, 0x8, 0x8, 0x3, 0x0, 0xffffffff, 0x4730, 0x6, 0xfffffff8, 0x8, 0x4, 0x4, 0x8001, 0x80000000, 0x8, 0x3ff, 0x7, 0x1, 0x6, 0x1, 0x0, 0xfffffffa, 0xffffffff, 0x2, 0x1, 0x9, 0xb71f, 0xfffffff7, 0x3ff, 0x0, 0x3, 0x80, 0x3, 0x3, 0x0, 0x5, 0x0, 0x2, 0x6, 0x800, 0x1, 0x1, 0x0, 0xfffffffd, 0x7c8, 0x8001, 0x74, 0x7fff, 0x9, 0x8, 0x8, 0x401, 0xc, 0xab7, 0x7ff, 0x3, 0x6, 0x2eb, 0x400, 0x9, 0x5cef, 0x7, 0x401, 0xc39, 0xfffffffa, 0x4, 0x4, 0x8, 0x1, 0x6, 0x7f, 0x1, 0xbade, 0x8, 0x4, 0xd698, 0x90, 0x1f, 0x7fff, 0x9a4, 0xb84, 0x7d80, 0x7, 0x7fff, 0x5, 0x100, 0x8000, 0x4, 0x8, 0x1831, 0x1ff, 0xfffffffd, 0x3, 0x3ff, 0x100000, 0x6, 0x9, 0x1, 0xfff, 0x3, 0x20, 0xffffffff, 0x40, 0x7fff, 0x9, 0x2, 0x800, 0x6, 0x4, 0x4, 0x3, 0xfe0, 0x8, 0x5, 0x38a, 0xeb, 0xffff, 0x5, 0x1, 0x0, 0x17, 0xe, 0x6, 0x6, 0x99c, 0x1, 0x5, 0x0, 0xb4, 0xfff, 0x2000000, 0xfffffff7, 0x80000000, 0x7ff, 0xcf, 0x2c0b, 0x3, 0xf80, 0x1, 0x4, 0x8, 0xeb, 0x4, 0x7, 0x5, 0x3, 0x6, 0x1, 0x80, 0x0, 0x8, 0x40, 0xf, 0x2, 0x10000, 0x9, 0x7, 0xfffffff8, 0x1, 0x0, 0x9, 0x5, 0x4, 0xc, 0x2, 0x100, 0x7, 0x7e7, 0x8, 0x8, 0x18a, 0x5, 0x7, 0xd, 0xd2, 0x5, 0x401, 0x0, 0x4, 0x1000, 0x6, 0x7, 0x1, 0x4, 0x64, 0x0, 0x2, 0x7, 0x0, 0x4, 0xc9ae, 0x8, 0x8, 0x3, 0xfffffff9, 0xee, 0x7, 0xb, 0x2, 0x81, 0x8, 0xf18, 0x800, 0xffffffff, 0x3, 0x6, 0x1ff, 0x7, 0x5, 0x10, 0x1ec2, 0x1, 0x5, 0x1, 0xf50, 0xfff, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6a9f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8e}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x7, 0x6, 0x334, 0xe, 0xd8ee, 0x5, 0x9, 0xffffbb85, 0x7, 0x4c8, 0x8000, 0x80, 0xffff6570, 0x5, 0x9, 0xfec8, 0x98c9, 0x1, 0x7f, 0x4, 0x2, 0xc, 0xcc3, 0xbb95, 0xc0, 0x0, 0xfffffffb, 0x9, 0x8, 0x9a7, 0x1000, 0x50, 0x2, 0xfffffffd, 0x5, 0x400, 0x4, 0xd1, 0x800, 0x0, 0xe, 0x9, 0x5, 0x5, 0x6, 0xd57012b, 0x0, 0x2, 0x2, 0xe, 0x4, 0x3a, 0xe0000000, 0xb350, 0x9, 0x1, 0x6e, 0x1, 0x3, 0x80000001, 0x44, 0x9, 0x1, 0x7fff, 0x3, 0x8f8d, 0xf, 0x3, 0x3, 0xffff8000, 0x1, 0xfffff815, 0xfffffff1, 0x5, 0x2, 0x2a07, 0xfff, 0x200, 0x2, 0x5, 0xcab, 0xfff, 0x0, 0x4, 0x7, 0x1, 0xb8, 0xff, 0x764, 0x40ca, 0x800, 0x3, 0xc, 0x1, 0x3, 0x7ff, 0x5, 0x6, 0x9, 0x3, 0x9f80, 0x4, 0x6, 0xfffffffc, 0x80000000, 0x34a, 0x8, 0x0, 0x94, 0xf, 0x5, 0x3, 0x6, 0x5, 0x9, 0x80000001, 0x81, 0x1, 0x8, 0x1, 0x6, 0x401, 0x7050f6f0, 0xfffff4df, 0x8, 0xed8, 0x7, 0x9, 0x5, 0x7, 0x5, 0x1, 0x7, 0x8, 0x72, 0x8001, 0x8, 0x2, 0xffff, 0x2, 0x4e, 0xd, 0x98e7, 0x4, 0x3, 0xd57, 0x0, 0x9, 0xb, 0x0, 0x6, 0x3ff, 0xd2b, 0x32098203, 0xe1cf, 0x6, 0x8, 0x1, 0x2, 0x1ff, 0x2, 0x0, 0x4, 0x1, 0x9, 0x3a5, 0x4, 0x57, 0x2e3c3bc7, 0x5, 0xfff, 0x5, 0x4000000, 0x48, 0x4, 0xfa49, 0xfffffd1c, 0x9, 0x9, 0x0, 0x2, 0x40000000, 0x6, 0x3, 0x0, 0x6, 0x7fff, 0xf, 0x1, 0x5, 0xc, 0xffff, 0x9, 0x79f248df, 0x0, 0x1, 0x1, 0x36598, 0x1, 0x0, 0xa, 0xf6, 0xae, 0x2, 0xc6, 0xff, 0xa, 0xe6d, 0x4, 0x6, 0xa, 0x1, 0x6, 0x7, 0x410, 0x6a6, 0x8001, 0x1, 0xfffffffd, 0x6, 0x6, 0x7, 0x6, 0x7f, 0x0, 0xd2, 0x7, 0x4, 0x9, 0x3, 0x4c, 0x4, 0x4, 0xfffff000, 0x7, 0x4, 0x57e6, 0x3, 0x7, 0x4, 0x2, 0x1, 0x0, 0x0, 0xf5, 0x10000, 0x5, 0x8000, 0x5, 0x384fc846, 0x8, 0x101, 0x2, 0x6]}]]}, {0x46, 0x6, "fb761c47550cb5b63a9035701cd9c1bea89e68051eeed84afd9d078a62e3ad743b1a2c7c110e64184addf1b6c434fe897e81688121a21c952d869705341e1f5ccbc7"}, {0xc, 0x7, {0x1, 0x20a43da060ebde8a}}, {0xc, 0x8, {0x785466fcf8df252b}}}}, @m_connmark={0x16c, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a, 0xc9a, 0x20000000, 0x5, 0x10}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0xa0cf, 0x3, 0x6, 0xc3b}, 0xc53c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xf79, 0x0, 0x744, 0x816}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x10000000, 0x9, 0x4}, 0x3}}]}, {0xc9, 0x6, "bfbe8c2c7ce33fab7579aa17dd06cd4b9ede47da11bab1edd5c2d9036425b7984368a85b258a42de1c79721f253bbcbcf18c7ed700f524e7b3fee07003e6696f9b7cc0fe4cbc3a5f636f6230099c1cadd59d70c07e4353e6946cd607097b9fe5c0a55078229977ea53ffc70b8f10569707b2a16e813ff568436b7905481a36a8dad7355d7a709032022e24da38d1f5c992197f2bcf0784f94b69ddf0511906a8cf7b335638fcf87a27ce241c391034feea6c3015be00fb81742754fb705a67de3ebf389afd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x20f4}, 0x1, 0x0, 0x0, 0x44095}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002840)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x77}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000300)=""/15, 0x40f00, 0x44, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x7, 0x7fff, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x0, 0x4, 0x9, 0x9}, {0x4, 0x4, 0xf, 0x2}, {0x2, 0x3, 0xd, 0x4}, {0x1, 0x3, 0xe, 0x2}], 0x10, 0x358, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x20000890) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): ributes in process `syz.4.441'. [ 118.656856][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.671643][ T7618] bond0: (slave bond_slave_0): Releasing backup interface [ 118.682566][ T7618] bond0: (slave bond_slave_1): Releasing backup interface [ 118.700413][ T7618] team0: Port device team_slave_0 removed [ 118.712705][ T7618] team0: Port device team_slave_1 removed [ 118.719038][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.727214][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.736269][ T7618] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.745939][ T7618] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.760874][ T7618] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.772977][ T7618] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.790898][ T7618] team0: Port device geneve0 removed [ 118.799475][ T7618] team0: Port device wlan1 removed [ 118.810382][ T7618] team0: Port device bridge3 removed [ 118.816340][ T7622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.441'. [ 118.839952][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.441'. [ 118.862171][ T7623] team0: Mode changed to "loadbalance" [ 119.266392][ T7640] gretap0: entered promiscuous mode [ 119.621858][ T7664] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.683728][ T7671] netlink: 'syz.3.454': attribute type 11 has an invalid length. [ 119.702459][ T7672] netlink: 'syz.3.454': attribute type 11 has an invalid length. [ 119.979200][ T7676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.990745][ T7678] netlink: 'syz.0.456': attribute type 32 has an invalid length. [ 120.016785][ T7676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.041913][ T7676] hsr0: entered promiscuous mode [ 120.046996][ T7676] hsr0: entered allmulticast mode [ 120.066981][ T7676] hsr_slave_0: entered allmulticast mode [ 120.074020][ T7676] hsr_slave_1: entered allmulticast mode [ 120.463056][ T7693] FAULT_INJECTION: forcing a failure. [ 120.463056][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 120.496886][ T7693] CPU: 0 UID: 0 PID: 7693 Comm: syz.2.460 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 120.496916][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.496929][ T7693] Call Trace: [ 120.496936][ T7693] [ 120.496945][ T7693] dump_stack_lvl+0x241/0x360 [ 120.496976][ T7693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.497000][ T7693] ? __pfx__printk+0x10/0x10 [ 120.497022][ T7693] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 120.497054][ T7693] ? __pfx___might_resched+0x10/0x10 [ 120.497086][ T7693] ? aa_label_sk_perm+0x4f3/0x6c0 [ 120.497120][ T7693] should_fail_ex+0x40a/0x550 [ 120.497156][ T7693] should_failslab+0xac/0x100 [ 120.497187][ T7693] kmem_cache_alloc_node_noprof+0x77/0x380 [ 120.497216][ T7693] ? __alloc_skb+0x1c3/0x440 [ 120.497243][ T7693] __alloc_skb+0x1c3/0x440 [ 120.497270][ T7693] ? __pfx___alloc_skb+0x10/0x10 [ 120.497303][ T7693] netlink_sendmsg+0x634/0xcb0 [ 120.497348][ T7693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.497384][ T7693] ? aa_sock_msg_perm+0x91/0x160 [ 120.497422][ T7693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.497452][ T7693] __sock_sendmsg+0x221/0x270 [ 120.497486][ T7693] ____sys_sendmsg+0x53a/0x860 [ 120.497519][ T7693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.497542][ T7693] ? __fget_files+0x2a/0x410 [ 120.497577][ T7693] ? __fget_files+0x2a/0x410 [ 120.497620][ T7693] __sys_sendmsg+0x269/0x350 [ 120.497650][ T7693] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.497689][ T7693] ? do_sys_openat2+0x17a/0x1d0 [ 120.497745][ T7693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.497779][ T7693] ? do_syscall_64+0x100/0x230 [ 120.497810][ T7693] ? do_syscall_64+0xb6/0x230 [ 120.497841][ T7693] do_syscall_64+0xf3/0x230 [ 120.497867][ T7693] ? clear_bhb_loop+0x35/0x90 [ 120.497899][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.497928][ T7693] RIP: 0033:0x7fdd31f8d169 [ 120.497945][ T7693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.497961][ T7693] RSP: 002b:00007fdd32eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.497993][ T7693] RAX: ffffffffffffffda RBX: 00007fdd321a5fa0 RCX: 00007fdd31f8d169 [ 120.498008][ T7693] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 120.498019][ T7693] RBP: 00007fdd32eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.498031][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.498042][ T7693] R13: 0000000000000000 R14: 00007fdd321a5fa0 R15: 00007ffcf16b4b58 [ 120.498069][ T7693] [ 120.779614][ T7696] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.016350][ T7708] __nla_validate_parse: 6 callbacks suppressed [ 121.016369][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 121.031710][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 121.041941][ T7708] netlink: 'syz.2.465': attribute type 14 has an invalid length. [ 121.066445][ T7708] netlink: 'syz.2.465': attribute type 11 has an invalid length. [ 121.121240][ T7712] netlink: 92 bytes leftover after parsing attributes in process `syz.1.466'. [ 121.583290][ T7732] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 121.654219][ T7735] lo speed is unknown, defaulting to 1000 [ 121.656273][ T7738] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.028691][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.084789][ T7750] team0: Port device bond0 added [ 122.140331][ T7760] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.152866][ T7752] lo speed is unknown, defaulting to 1000 [ 122.371103][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 122.515033][ T7766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.600410][ T7772] netlink: 'syz.2.480': attribute type 39 has an invalid length. [ 122.659023][ T7766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 123.076410][ T7792] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 123.134021][ T7792] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 123.336624][ T7800] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 123.378712][ T7800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.483'. [ 123.487044][ T7804] FAULT_INJECTION: forcing a failure. [ 123.487044][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.537880][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.2.485 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 123.537906][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.537917][ T7804] Call Trace: [ 123.537924][ T7804] [ 123.537931][ T7804] dump_stack_lvl+0x241/0x360 [ 123.537960][ T7804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.537982][ T7804] ? __pfx__printk+0x10/0x10 [ 123.538002][ T7804] ? __pfx_lock_release+0x10/0x10 [ 123.538038][ T7804] should_fail_ex+0x40a/0x550 [ 123.538070][ T7804] _copy_from_iter+0x1df/0x1c40 [ 123.538093][ T7804] ? __virt_addr_valid+0x183/0x530 [ 123.538113][ T7804] ? __pfx_lock_release+0x10/0x10 [ 123.538147][ T7804] ? __alloc_skb+0x28f/0x440 [ 123.538167][ T7804] ? __pfx__copy_from_iter+0x10/0x10 [ 123.538192][ T7804] ? __virt_addr_valid+0x183/0x530 [ 123.538209][ T7804] ? __virt_addr_valid+0x183/0x530 [ 123.538226][ T7804] ? __virt_addr_valid+0x45f/0x530 [ 123.538244][ T7804] ? __phys_addr_symbol+0x2f/0x70 [ 123.538261][ T7804] ? __check_object_size+0x47a/0x730 [ 123.538291][ T7804] netlink_sendmsg+0x742/0xcb0 [ 123.538332][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.538365][ T7804] ? aa_sock_msg_perm+0x91/0x160 [ 123.538399][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.538426][ T7804] __sock_sendmsg+0x221/0x270 [ 123.538456][ T7804] ____sys_sendmsg+0x53a/0x860 [ 123.538487][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.538508][ T7804] ? __fget_files+0x2a/0x410 [ 123.538538][ T7804] ? __fget_files+0x2a/0x410 [ 123.538574][ T7804] __sys_sendmsg+0x269/0x350 [ 123.538601][ T7804] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.538635][ T7804] ? do_sys_openat2+0x17a/0x1d0 [ 123.538686][ T7804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.538716][ T7804] ? do_syscall_64+0x100/0x230 [ 123.538751][ T7804] ? do_syscall_64+0xb6/0x230 [ 123.538778][ T7804] do_syscall_64+0xf3/0x230 [ 123.538802][ T7804] ? clear_bhb_loop+0x35/0x90 [ 123.538831][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.538855][ T7804] RIP: 0033:0x7fdd31f8d169 [ 123.538871][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.538886][ T7804] RSP: 002b:00007fdd32eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.538916][ T7804] RAX: ffffffffffffffda RBX: 00007fdd321a5fa0 RCX: 00007fdd31f8d169 [ 123.538928][ T7804] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 123.538938][ T7804] RBP: 00007fdd32eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 123.538948][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.538958][ T7804] R13: 0000000000000000 R14: 00007fdd321a5fa0 R15: 00007ffcf16b4b58 [ 123.538982][ T7804] [ 124.046158][ T7814] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 125.392683][ T7809] bond0: entered promiscuous mode [ 125.406006][ T7809] bond_slave_0: entered promiscuous mode [ 125.412768][ T7809] bond_slave_1: entered promiscuous mode [ 125.542296][ T7821] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.682166][ T7825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 60910 - 0 [ 125.716303][ T7825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 60910 - 0 [ 125.751026][ T7825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 60910 - 0 [ 125.760636][ T7825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 60910 - 0 [ 125.781200][ T7825] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 43136 - 0 [ 125.802577][ T7825] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43136 - 0 [ 125.823635][ T7825] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43136 - 0 [ 125.828460][ T7833] netlink: 'syz.1.494': attribute type 8 has an invalid length. [ 125.833369][ T7825] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43136 - 0 [ 125.851211][ T7825] geneve2: entered promiscuous mode [ 125.856566][ T7825] geneve2: entered allmulticast mode [ 125.903386][ T7835] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 126.010534][ T7833] lo speed is unknown, defaulting to 1000 [ 126.609310][ T7856] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.040434][ T7871] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 127.468611][ T7871] team0 (unregistering): Port device C removed [ 127.489206][ T7871] team0 (unregistering): Port device team_slave_1 removed [ 127.519074][ T7871] team0 (unregistering): Port device bond0 removed [ 127.559456][ T7892] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.577745][ T7873] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51536 - 0 [ 127.648306][ T7873] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51536 - 0 [ 127.657715][ T7873] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51536 - 0 [ 127.682305][ T7873] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 51536 - 0 [ 127.701835][ T7873] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 38521 - 0 [ 127.727704][ T7873] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 38521 - 0 [ 127.765719][ T7873] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 38521 - 0 [ 127.775345][ T7873] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 38521 - 0 [ 127.825251][ T7873] geneve2: entered promiscuous mode [ 127.830887][ T7873] geneve2: entered allmulticast mode [ 127.844223][ T7900] netlink: 88 bytes leftover after parsing attributes in process `syz.0.514'. [ 127.859492][ T7883] vlan2: entered promiscuous mode [ 127.911657][ T7883] bond0: (slave vlan2): Opening slave failed [ 128.224107][ T7913] netlink: 'syz.4.521': attribute type 4 has an invalid length. [ 128.258205][ T7913] netlink: 'syz.4.521': attribute type 4 has an invalid length. [ 128.829404][ T7935] netlink: 96 bytes leftover after parsing attributes in process `syz.4.525'. [ 129.259734][ T7949] netlink: 47 bytes leftover after parsing attributes in process `syz.0.529'. [ 129.342889][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.529'. [ 129.409020][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 129.615047][ T7971] netlink: 240 bytes leftover after parsing attributes in process `syz.2.532'. [ 129.638334][ T7966] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.072201][ T7990] IPVS: Error connecting to the multicast addr [ 130.584191][ T8011] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 131.377807][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 131.979274][ T8056] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.212726][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 132.348873][ T8066] lo speed is unknown, defaulting to 1000 [ 132.476263][ T8083] syzkaller1: entered promiscuous mode [ 132.493575][ T8083] syzkaller1: entered allmulticast mode [ 132.520797][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 132.903208][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.117388][ T8109] bridge0: port 3(gretap0) entered blocking state [ 133.160661][ T8109] bridge0: port 3(gretap0) entered disabled state [ 133.167512][ T8109] gretap0: entered allmulticast mode [ 133.352279][ T8066] lo speed is unknown, defaulting to 1000 [ 133.381169][ T8121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.420985][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.447463][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.490901][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.597937][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 133.685730][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.698001][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.734642][ T8135] openvswitch: netlink: Missing valid actions attribute. [ 133.779079][ T8135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.873796][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 133.889932][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 134.068127][ T8148] netlink: 'syz.0.566': attribute type 32 has an invalid length. [ 134.129466][ T8142] batman_adv: batadv0: Adding interface: dummy0 [ 134.136175][ T8142] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.187031][ T8142] batman_adv: batadv0: Interface activated: dummy0 [ 134.470238][ T8162] lo speed is unknown, defaulting to 1000 [ 134.762693][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.570'. [ 135.181373][ T8193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.338279][ T8201] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 135.775694][ T8217] netlink: 'syz.1.586': attribute type 3 has an invalid length. [ 136.165254][ T8232] geneve1: entered promiscuous mode [ 136.743577][ T8257] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.112873][ T8274] netlink: 'syz.2.604': attribute type 32 has an invalid length. [ 137.122531][ T8274] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 137.190989][ T8274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.265040][ T8278] bond1: (slave veth3): Enslaving as an active interface with a down link [ 137.273878][ T8281] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 137.332212][ T8274] ip6erspan0: entered promiscuous mode [ 137.342985][ T8274] bond1: (slave ip6erspan0): making interface the new active one [ 137.354601][ T8274] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 137.386136][ T8274] syz.2.604 (8274) used greatest stack depth: 18000 bytes left [ 137.874733][ T5885] IPVS: starting estimator thread 0... [ 137.998102][ T8309] IPVS: using max 23 ests per chain, 55200 per kthread [ 139.810812][ T8326] __nla_validate_parse: 22 callbacks suppressed [ 139.810831][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 139.827068][ T8326] tipc: Started in network mode [ 139.832414][ T8326] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.842998][ T8326] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 139.855676][ T8326] tipc: Enabled bearer , priority 10 [ 140.100944][ T8345] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.295435][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 140.353253][ T8354] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.627'. [ 140.385871][ T8354] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 140.468475][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 140.761604][ T8379] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.770157][ T8379] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.778459][ T8379] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.786702][ T8379] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.859655][ T9] tipc: Node number set to 1 [ 140.901778][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 140.919718][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 140.930407][ T8389] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.941084][ T5884] IPVS: starting estimator thread 0... [ 140.948757][ T8382] netlink: 5 bytes leftover after parsing attributes in process `syz.0.637'. [ 140.975687][ T8382] x_tables: duplicate underflow at hook 2 [ 141.038091][ T8388] IPVS: using max 23 ests per chain, 55200 per kthread [ 141.309785][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 141.324536][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 141.549224][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 141.836031][ T8433] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.919820][ T8435] lo speed is unknown, defaulting to 1000 [ 142.054879][ T8440] lo speed is unknown, defaulting to 1000 [ 143.004231][ T8465] Driver unsupported XDP return value 0 on prog (id 242) dev N/A, expect packet loss! [ 143.284157][ T8474] openvswitch: netlink: Missing valid actions attribute. [ 143.306095][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.902308][ T8481] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 143.957465][ T8486] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.975408][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.004042][ T8481] team0: entered promiscuous mode [ 144.068053][ T8481] team_slave_0: entered promiscuous mode [ 144.074025][ T8481] team_slave_1: entered promiscuous mode [ 144.133303][ T8481] bond0: (slave team0): Enslaving as an active interface with an up link [ 145.207312][ T8520] __nla_validate_parse: 5 callbacks suppressed [ 145.207330][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 145.362113][ T8526] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 146.448424][ T8526] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 146.598628][ T8530] veth5: entered promiscuous mode [ 146.672310][ T8541] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 146.690579][ T8541] netlink: 2 bytes leftover after parsing attributes in process `syz.4.681'. [ 146.734118][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 146.941430][ T8550] netlink: zone id is out of range [ 146.961825][ T8550] netlink: zone id is out of range [ 147.009809][ T8550] netlink: zone id is out of range [ 147.016399][ T8550] netlink: set zone limit has 8 unknown bytes [ 147.082545][ T8561] netlink: 'syz.0.687': attribute type 5 has an invalid length. [ 147.110551][ T8561] netlink: 'syz.0.687': attribute type 11 has an invalid length. [ 147.118680][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 147.211746][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 147.230927][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 147.274439][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 147.280961][ T8569] netlink: 'syz.4.688': attribute type 3 has an invalid length. [ 147.305176][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 147.308099][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 147.413656][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 147.449969][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 147.934383][ T8600] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 148.028092][ T8606] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 148.532201][ T8632] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 148.625120][ T8645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.841828][ T5884] IPVS: starting estimator thread 0... [ 149.886253][ T8711] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.958070][ T8713] IPVS: using max 22 ests per chain, 52800 per kthread [ 149.968818][ T8711] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.174472][ T8711] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.258228][ T8711] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.442561][ T8741] __nla_validate_parse: 15 callbacks suppressed [ 150.442590][ T8741] netlink: 296 bytes leftover after parsing attributes in process `syz.0.729'. [ 150.542191][ T8711] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.586496][ T8711] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.776635][ T8711] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.809600][ T8711] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.045941][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.053516][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.068815][ T8762] bond0: left promiscuous mode [ 151.074037][ T8762] bond_slave_0: left promiscuous mode [ 151.079966][ T8762] bond_slave_1: left promiscuous mode [ 151.085738][ T8762] team0: left promiscuous mode [ 151.091253][ T8762] team_slave_0: left promiscuous mode [ 151.097147][ T8762] team_slave_1: left promiscuous mode [ 151.114096][ T8762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.131812][ T978] lo speed is unknown, defaulting to 1000 [ 151.140970][ T8723] tipc: Started in network mode [ 151.145870][ T8723] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.201088][ T8723] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.225478][ T8723] tipc: Enabled bearer , priority 10 [ 151.338375][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.487958][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.628103][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.768185][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.058004][ C0] net_ratelimit: 1 callbacks suppressed [ 152.058024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.198854][ T9] tipc: Node number set to 2886997162 [ 152.341013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.617985][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.663774][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 152.679370][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 152.689332][ T8800] netlink: 10 bytes leftover after parsing attributes in process `syz.1.746'. [ 153.157962][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.572732][ T8804] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 153.599323][ T8787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.608291][ T8711] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.616780][ T8711] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.675538][ T8711] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.695002][ T8711] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.717091][ T8711] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.758104][ T8711] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.794227][ T8711] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.833882][ T8711] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.178319][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.198753][ T8829] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 154.413595][ T8837] x_tables: duplicate underflow at hook 4 [ 154.433151][ T8839] tipc: Can't bind to reserved service type 2 [ 155.030767][ T8872] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.040936][ T8872] veth1_virt_wifi: entered promiscuous mode [ 155.047007][ T8872] veth1_virt_wifi: entered allmulticast mode [ 155.133058][ T8875] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 155.145641][ T8875] netlink: 128 bytes leftover after parsing attributes in process `syz.1.770'. [ 155.160180][ T8875] netlink: 'syz.1.770': attribute type 5 has an invalid length. [ 155.170239][ T8875] netlink: 'syz.1.770': attribute type 6 has an invalid length. [ 155.178650][ T8875] netlink: 3 bytes leftover after parsing attributes in process `syz.1.770'. [ 155.217901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.306179][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.772'. [ 155.331027][ T8881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.347335][ T8881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 155.363767][ T8881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 38521 - 0 [ 155.466642][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 155.480667][ T8881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.492791][ T8881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 155.526941][ T8881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 38521 - 0 [ 155.553471][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 155.567428][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.582503][ T8886] dummy0: entered promiscuous mode [ 155.591978][ T8886] macsec1: entered promiscuous mode [ 155.657556][ T8881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.675996][ T8881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 155.701263][ T8881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 38521 - 0 [ 155.737208][ T8894] netlink: 'syz.3.776': attribute type 39 has an invalid length. [ 155.823400][ T8881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.848003][ T8881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 155.861176][ T8881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 38521 - 0 [ 155.893152][ T8897] lo speed is unknown, defaulting to 1000 [ 156.034085][ T8881] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 38521 - 0 [ 156.043045][ T8881] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 51536 - 0 [ 156.051535][ T8881] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 156.069191][ T8881] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 38521 - 0 [ 156.079822][ T8881] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 51536 - 0 [ 156.094437][ T8881] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 156.116692][ T8908] FAULT_INJECTION: forcing a failure. [ 156.116692][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 156.121288][ T8881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 38521 - 0 [ 156.138122][ T8881] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 51536 - 0 [ 156.144829][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.2.780 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 156.144855][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.144867][ T8908] Call Trace: [ 156.144874][ T8908] [ 156.144882][ T8908] dump_stack_lvl+0x241/0x360 [ 156.144914][ T8908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.144951][ T8908] ? __pfx__printk+0x10/0x10 [ 156.144975][ T8908] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 156.145031][ T8908] ? __pfx___might_resched+0x10/0x10 [ 156.145058][ T8908] ? rcu_is_watching+0x15/0xb0 [ 156.145129][ T8908] should_fail_ex+0x40a/0x550 [ 156.145176][ T8908] should_failslab+0xac/0x100 [ 156.145225][ T8908] __kmalloc_node_noprof+0xe1/0x4d0 [ 156.145255][ T8908] ? __kvmalloc_node_noprof+0x72/0x190 [ 156.145291][ T8908] __kvmalloc_node_noprof+0x72/0x190 [ 156.145314][ T8908] nf_hook_entries_grow+0x288/0x720 [ 156.145349][ T8908] ? __mutex_unlock_slowpath+0x227/0x800 [ 156.145395][ T8908] __nf_register_net_hook+0x278/0x8d0 [ 156.145441][ T8908] nf_register_net_hook+0xb0/0x190 [ 156.145474][ T8908] nf_register_net_hooks+0x41/0x1a0 [ 156.145510][ T8908] nf_ct_netns_do_get+0x3b0/0x630 [ 156.145546][ T8908] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 156.145584][ T8908] ? nft_validate_register_store+0x188/0x1d0 [ 156.145621][ T8908] ? nft_parse_register_store+0x215/0x290 [ 156.145658][ T8908] nft_ct_get_init+0x63f/0x8b0 [ 156.145701][ T8908] nf_tables_newrule+0x1857/0x2980 [ 156.145743][ T8908] ? __pfx_nf_tables_newrule+0x10/0x10 [ 156.145762][ T8908] ? __skb_clone+0x5c/0x6c0 [ 156.145808][ T8908] ? __nla_parse+0x40/0x60 [ 156.145838][ T8908] nfnetlink_rcv+0x14e3/0x2ab0 [ 156.145870][ T8908] ? __pfx_validate_chain+0x10/0x10 [ 156.145934][ T8908] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.145974][ T8908] ? __lock_acquire+0x1397/0x2100 [ 156.146064][ T8908] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.146105][ T8908] ? __pfx_lock_release+0x10/0x10 [ 156.146156][ T8908] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.146199][ T8908] netlink_unicast+0x7f6/0x990 [ 156.146239][ T8908] ? __pfx_netlink_unicast+0x10/0x10 [ 156.146267][ T8908] ? __virt_addr_valid+0x45f/0x530 [ 156.146290][ T8908] ? __phys_addr_symbol+0x2f/0x70 [ 156.146310][ T8908] ? __check_object_size+0x47a/0x730 [ 156.146347][ T8908] netlink_sendmsg+0x8de/0xcb0 [ 156.146395][ T8908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.146436][ T8908] ? aa_sock_msg_perm+0x91/0x160 [ 156.146480][ T8908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.146512][ T8908] __sock_sendmsg+0x221/0x270 [ 156.146549][ T8908] ____sys_sendmsg+0x53a/0x860 [ 156.146587][ T8908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.146612][ T8908] ? __fget_files+0x2a/0x410 [ 156.146649][ T8908] ? __fget_files+0x2a/0x410 [ 156.146693][ T8908] __sys_sendmsg+0x269/0x350 [ 156.146726][ T8908] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.146770][ T8908] ? do_sys_openat2+0x17a/0x1d0 [ 156.146836][ T8908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.146872][ T8908] ? do_syscall_64+0x100/0x230 [ 156.146906][ T8908] ? do_syscall_64+0xb6/0x230 [ 156.146939][ T8908] do_syscall_64+0xf3/0x230 [ 156.146968][ T8908] ? clear_bhb_loop+0x35/0x90 [ 156.147004][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.147034][ T8908] RIP: 0033:0x7fdd31f8d169 [ 156.147052][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.147070][ T8908] RSP: 002b:00007fdd32eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.147094][ T8908] RAX: ffffffffffffffda RBX: 00007fdd321a5fa0 RCX: 00007fdd31f8d169 [ 156.147110][ T8908] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 156.147124][ T8908] RBP: 00007fdd32eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 156.147137][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.147149][ T8908] R13: 0000000000000000 R14: 00007fdd321a5fa0 R15: 00007ffcf16b4b58 [ 156.147191][ T8908] [ 156.261428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.541153][ T8881] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 156.557033][ T8881] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 38521 - 0 [ 156.566042][ T8881] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 51536 - 0 [ 156.574389][ T8881] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 156.935169][ T8925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.785'. [ 156.956104][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.963619][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.095255][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.115818][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.222705][ T8915] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 157.234220][ T8915] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 157.243048][ T8915] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 157.252442][ T8915] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 157.308161][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.327206][ T8915] bond0: left allmulticast mode [ 157.332368][ T8915] bond_slave_0: left allmulticast mode [ 157.338485][ T8915] bond_slave_1: left allmulticast mode [ 157.344082][ T8915] bond0: left promiscuous mode [ 157.350611][ T8915] bond_slave_0: left promiscuous mode [ 157.356273][ T8915] bond_slave_1: left promiscuous mode [ 157.372925][ T8915] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 157.408268][ T8915] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 38521 - 0 [ 157.418249][ T8915] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 38521 - 0 [ 157.426881][ T8915] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 38521 - 0 [ 157.435922][ T8915] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 38521 - 0 [ 157.444941][ T8915] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 51536 - 0 [ 157.454781][ T8915] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 51536 - 0 [ 157.466150][ T8915] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 51536 - 0 [ 157.476589][ T8915] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 51536 - 0 [ 157.602270][ T8946] lo speed is unknown, defaulting to 1000 [ 157.812399][ T8957] FAULT_INJECTION: forcing a failure. [ 157.812399][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 157.830076][ T8957] CPU: 0 UID: 0 PID: 8957 Comm: syz.1.791 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 157.830102][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.830113][ T8957] Call Trace: [ 157.830120][ T8957] [ 157.830128][ T8957] dump_stack_lvl+0x241/0x360 [ 157.830157][ T8957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.830179][ T8957] ? __pfx__printk+0x10/0x10 [ 157.830201][ T8957] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 157.830230][ T8957] ? __pfx___might_resched+0x10/0x10 [ 157.830254][ T8957] ? rcu_is_watching+0x15/0xb0 [ 157.830280][ T8957] should_fail_ex+0x40a/0x550 [ 157.830315][ T8957] should_failslab+0xac/0x100 [ 157.830343][ T8957] __kmalloc_node_noprof+0xe1/0x4d0 [ 157.830370][ T8957] ? __kvmalloc_node_noprof+0x72/0x190 [ 157.830394][ T8957] __kvmalloc_node_noprof+0x72/0x190 [ 157.830414][ T8957] nf_hook_entries_grow+0x288/0x720 [ 157.830454][ T8957] __nf_register_net_hook+0x278/0x8d0 [ 157.830494][ T8957] nf_register_net_hook+0xb0/0x190 [ 157.830523][ T8957] nf_register_net_hooks+0x41/0x1a0 [ 157.830552][ T8957] nf_ct_netns_do_get+0x3b0/0x630 [ 157.830583][ T8957] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 157.830613][ T8957] ? nft_validate_register_store+0x188/0x1d0 [ 157.830645][ T8957] ? nft_parse_register_store+0x215/0x290 [ 157.830677][ T8957] nft_ct_get_init+0x63f/0x8b0 [ 157.830713][ T8957] nf_tables_newrule+0x1857/0x2980 [ 157.830749][ T8957] ? __pfx_nf_tables_newrule+0x10/0x10 [ 157.830767][ T8957] ? __skb_clone+0x5c/0x6c0 [ 157.830805][ T8957] ? __nla_parse+0x40/0x60 [ 157.830831][ T8957] nfnetlink_rcv+0x14e3/0x2ab0 [ 157.830853][ T8957] ? __pfx_validate_chain+0x10/0x10 [ 157.830905][ T8957] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.830946][ T8957] ? __lock_acquire+0x1397/0x2100 [ 157.831011][ T8957] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.831042][ T8957] ? __pfx_lock_release+0x10/0x10 [ 157.831086][ T8957] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.831118][ T8957] netlink_unicast+0x7f6/0x990 [ 157.831153][ T8957] ? __pfx_netlink_unicast+0x10/0x10 [ 157.831177][ T8957] ? __virt_addr_valid+0x45f/0x530 [ 157.831196][ T8957] ? __phys_addr_symbol+0x2f/0x70 [ 157.831214][ T8957] ? __check_object_size+0x47a/0x730 [ 157.831245][ T8957] netlink_sendmsg+0x8de/0xcb0 [ 157.831288][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.831322][ T8957] ? aa_sock_msg_perm+0x91/0x160 [ 157.831376][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.831406][ T8957] __sock_sendmsg+0x221/0x270 [ 157.831440][ T8957] ____sys_sendmsg+0x53a/0x860 [ 157.831474][ T8957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.831497][ T8957] ? __fget_files+0x2a/0x410 [ 157.831530][ T8957] ? __fget_files+0x2a/0x410 [ 157.831571][ T8957] __sys_sendmsg+0x269/0x350 [ 157.831602][ T8957] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.831641][ T8957] ? do_sys_openat2+0x17a/0x1d0 [ 157.831701][ T8957] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.831735][ T8957] ? do_syscall_64+0x100/0x230 [ 157.831767][ T8957] ? do_syscall_64+0xb6/0x230 [ 157.831797][ T8957] do_syscall_64+0xf3/0x230 [ 157.831825][ T8957] ? clear_bhb_loop+0x35/0x90 [ 157.831857][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.831883][ T8957] RIP: 0033:0x7f69eeb8d169 [ 157.831901][ T8957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.831917][ T8957] RSP: 002b:00007f69ef96d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.831945][ T8957] RAX: ffffffffffffffda RBX: 00007f69eeda5fa0 RCX: 00007f69eeb8d169 [ 157.831960][ T8957] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 157.831973][ T8957] RBP: 00007f69ef96d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.831985][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.831996][ T8957] R13: 0000000000000000 R14: 00007f69eeda5fa0 R15: 00007ffd7cf43908 [ 157.832028][ T8957] [ 158.217757][ T5842] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 158.231960][ T8959] lo speed is unknown, defaulting to 1000 [ 158.270058][ T8960] lo speed is unknown, defaulting to 1000 [ 158.337942][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.465124][ T8946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.788'. [ 158.738063][ T8988] netlink: 168 bytes leftover after parsing attributes in process `syz.2.798'. [ 159.224694][ T9016] syzkaller1: entered promiscuous mode [ 159.230460][ T9016] syzkaller1: entered allmulticast mode [ 159.250297][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 159.377975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.491792][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 159.750493][ T9034] syzkaller1: entered promiscuous mode [ 159.756134][ T9034] syzkaller1: entered allmulticast mode [ 159.855520][ T9046] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.869489][ T9042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.814'. [ 159.966340][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 160.056638][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.077595][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.148858][ T9036] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.158973][ T9036] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.168811][ T9036] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.178814][ T9036] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.417985][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.679511][ T9079] netlink: 900 bytes leftover after parsing attributes in process `syz.2.822'. [ 160.818137][ T9086] netlink: 'syz.0.824': attribute type 13 has an invalid length. [ 160.845343][ T9086] gretap0: refused to change device tx_queue_len [ 160.862112][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 160.871519][ T9086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.895989][ T9088] netlink: 'syz.3.825': attribute type 2 has an invalid length. [ 161.220770][ T9108] FAULT_INJECTION: forcing a failure. [ 161.220770][ T9108] name failslab, interval 1, probability 0, space 0, times 0 [ 161.233975][ T9108] CPU: 0 UID: 0 PID: 9108 Comm: syz.0.830 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 161.234002][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.234014][ T9108] Call Trace: [ 161.234022][ T9108] [ 161.234030][ T9108] dump_stack_lvl+0x241/0x360 [ 161.234063][ T9108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.234098][ T9108] ? __pfx__printk+0x10/0x10 [ 161.234121][ T9108] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 161.234169][ T9108] ? __pfx___might_resched+0x10/0x10 [ 161.234194][ T9108] ? rcu_is_watching+0x15/0xb0 [ 161.234224][ T9108] should_fail_ex+0x40a/0x550 [ 161.234262][ T9108] should_failslab+0xac/0x100 [ 161.234293][ T9108] __kmalloc_node_noprof+0xe1/0x4d0 [ 161.234322][ T9108] ? __kvmalloc_node_noprof+0x72/0x190 [ 161.234349][ T9108] __kvmalloc_node_noprof+0x72/0x190 [ 161.234383][ T9108] nf_hook_entries_grow+0x288/0x720 [ 161.234440][ T9108] __nf_register_net_hook+0x278/0x8d0 [ 161.234483][ T9108] nf_register_net_hook+0xb0/0x190 [ 161.234513][ T9108] nf_register_net_hooks+0x41/0x1a0 [ 161.234544][ T9108] nf_ct_netns_do_get+0x3b0/0x630 [ 161.234578][ T9108] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 161.234608][ T9108] ? nft_validate_register_store+0x188/0x1d0 [ 161.234644][ T9108] ? nft_parse_register_store+0x215/0x290 [ 161.234679][ T9108] nft_ct_get_init+0x63f/0x8b0 [ 161.234718][ T9108] nf_tables_newrule+0x1857/0x2980 [ 161.234756][ T9108] ? __pfx_nf_tables_newrule+0x10/0x10 [ 161.234774][ T9108] ? __skb_clone+0x5c/0x6c0 [ 161.234834][ T9108] ? __nla_parse+0x40/0x60 [ 161.234863][ T9108] nfnetlink_rcv+0x14e3/0x2ab0 [ 161.234887][ T9108] ? __pfx_validate_chain+0x10/0x10 [ 161.234948][ T9108] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.234986][ T9108] ? __lock_acquire+0x1397/0x2100 [ 161.235056][ T9108] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.235090][ T9108] ? __pfx_lock_release+0x10/0x10 [ 161.235137][ T9108] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.235165][ T9108] netlink_unicast+0x7f6/0x990 [ 161.235195][ T9108] ? __pfx_netlink_unicast+0x10/0x10 [ 161.235216][ T9108] ? __virt_addr_valid+0x45f/0x530 [ 161.235233][ T9108] ? __phys_addr_symbol+0x2f/0x70 [ 161.235248][ T9108] ? __check_object_size+0x47a/0x730 [ 161.235275][ T9108] netlink_sendmsg+0x8de/0xcb0 [ 161.235311][ T9108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.235342][ T9108] ? aa_sock_msg_perm+0x91/0x160 [ 161.235380][ T9108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.235404][ T9108] __sock_sendmsg+0x221/0x270 [ 161.235431][ T9108] ____sys_sendmsg+0x53a/0x860 [ 161.235459][ T9108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.235477][ T9108] ? __fget_files+0x2a/0x410 [ 161.235505][ T9108] ? __fget_files+0x2a/0x410 [ 161.235537][ T9108] __sys_sendmsg+0x269/0x350 [ 161.235562][ T9108] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.235593][ T9108] ? do_sys_openat2+0x17a/0x1d0 [ 161.235642][ T9108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.235669][ T9108] ? do_syscall_64+0x100/0x230 [ 161.235695][ T9108] ? do_syscall_64+0xb6/0x230 [ 161.235720][ T9108] do_syscall_64+0xf3/0x230 [ 161.235742][ T9108] ? clear_bhb_loop+0x35/0x90 [ 161.235769][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.235791][ T9108] RIP: 0033:0x7fa06818d169 [ 161.235806][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.235820][ T9108] RSP: 002b:00007fa06909e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.235837][ T9108] RAX: ffffffffffffffda RBX: 00007fa0683a5fa0 RCX: 00007fa06818d169 [ 161.235849][ T9108] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 161.235859][ T9108] RBP: 00007fa06909e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.235869][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.235879][ T9108] R13: 0000000000000000 R14: 00007fa0683a5fa0 R15: 00007fff0857a098 [ 161.235904][ T9108] [ 161.612440][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.618451][ T26] hid-generic 0005:0B57:0009.0001: item fetching failed at offset 0/1 [ 161.628796][ T26] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 162.334185][ T9131] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.467390][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 162.494187][ T9136] netlink: 'syz.2.838': attribute type 11 has an invalid length. [ 162.658046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.777146][ T9145] bridge0: port 3(gretap0) entered blocking state [ 162.783781][ T9145] bridge0: port 3(gretap0) entered forwarding state [ 162.868486][ T9145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.913256][ T9145] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.936876][ T9145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.974150][ T26] lo speed is unknown, defaulting to 1000 [ 163.078753][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 163.362247][ T9164] netlink: 'syz.0.847': attribute type 16 has an invalid length. [ 163.374173][ T9164] netlink: 'syz.0.847': attribute type 17 has an invalid length. [ 163.422207][ T9164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.490493][ T9172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.849'. [ 163.556650][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 163.664345][ T9178] lo speed is unknown, defaulting to 1000 [ 163.698011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.790766][ T9183] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 163.895174][ T9183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.660518][ T9201] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.738191][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.258173][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 165.314266][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 165.335921][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.414095][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.668066][ T9201] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.718005][ T9201] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.748394][ T9201] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.768251][ T9201] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.787953][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.833677][ T9201] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 165.948847][ T9201] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.958614][ T9201] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.967504][ T9201] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.976972][ T9201] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.044518][ T9201] macsec1: left promiscuous mode [ 166.420478][ T9252] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 166.460947][ T9253] vlan2: entered promiscuous mode [ 166.546582][ T9255] netlink: 'syz.2.867': attribute type 27 has an invalid length. [ 166.588456][ T9255] hsr0: left promiscuous mode [ 166.593178][ T9255] hsr0: left allmulticast mode [ 166.618016][ T9255] hsr_slave_0: left allmulticast mode [ 166.623436][ T9255] hsr_slave_1: left allmulticast mode [ 166.652424][ T9255] bridge3: left promiscuous mode [ 166.657740][ T9255] bridge3: left allmulticast mode [ 166.676290][ T9255] ip6tnl1: left promiscuous mode [ 166.693290][ T9255] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 43136 - 0 [ 166.703085][ T9255] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 43136 - 0 [ 166.713212][ T9255] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 43136 - 0 [ 166.723157][ T9255] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 43136 - 0 [ 166.732995][ T9255] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 60910 - 0 [ 166.745263][ T9265] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.768288][ T9255] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 60910 - 0 [ 166.782094][ T9255] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 60910 - 0 [ 166.807976][ T9255] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 60910 - 0 [ 166.818114][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.872597][ T9255] geneve2: left promiscuous mode [ 166.895195][ T9255] geneve2: left allmulticast mode [ 166.930346][ T9255] ip6erspan0: left promiscuous mode [ 166.999424][ T9260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.024641][ T9260] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.036614][ T9260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.083962][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 167.167036][ T9278] lo speed is unknown, defaulting to 1000 [ 167.623508][ T9296] lo speed is unknown, defaulting to 1000 [ 167.817488][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 167.858051][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.890227][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 168.299579][ T9320] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 168.337495][ T9322] netlink: 156 bytes leftover after parsing attributes in process `syz.3.887'. [ 168.356651][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 168.581754][ T9327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.666003][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.676147][ T9331] Â: renamed from pim6reg1 [ 168.682871][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.898096][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.934936][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 169.627989][ T9378] netlink: 68 bytes leftover after parsing attributes in process `syz.2.904'. [ 169.749649][ T9380] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 169.937945][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.176578][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.910'. [ 170.433528][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 170.463656][ T9407] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 170.471736][ T9407] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 170.488804][ T9407] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 170.508335][ T9407] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 170.565949][ T9407] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 170.638765][ T9417] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 170.853206][ T9428] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000 [ 170.978094][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.116453][ T9441] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 171.243655][ T9443] lo speed is unknown, defaulting to 1000 [ 171.323514][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 171.381674][ T9453] vlan2: entered promiscuous mode [ 171.404223][ T9453] gretap0: entered promiscuous mode [ 171.524456][ T9462] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 171.727531][ T9475] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.795864][ T9477] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 171.994899][ T9488] netlink: 'syz.2.940': attribute type 4 has an invalid length. [ 172.017982][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.233927][ T9499] __nla_validate_parse: 1 callbacks suppressed [ 172.233947][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 172.324120][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.946'. [ 172.348866][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.945'. [ 172.363045][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 172.562373][ T9516] syzkaller0: entered promiscuous mode [ 172.569388][ T9516] syzkaller0: entered allmulticast mode [ 172.578622][ T9516] netlink: 136 bytes leftover after parsing attributes in process `syz.0.948'. [ 172.587759][ T9516] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 172.725098][ T9525] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 172.809514][ T9525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.835209][ T9524] gretap1: entered promiscuous mode [ 172.874627][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 172.883690][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 172.893064][ T9539] netlink: 1 bytes leftover after parsing attributes in process `syz.3.957'. [ 172.907304][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 172.968165][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 173.001359][ T9539] lo speed is unknown, defaulting to 1000 [ 173.058022][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.066841][ T9542] lo speed is unknown, defaulting to 1000 [ 173.365875][ T9565] tipc: Started in network mode [ 173.372355][ T9565] tipc: Node identity 7, cluster identity 4711 [ 173.385147][ T9565] tipc: Node number set to 7 [ 173.515498][ T9577] tipc: Enabled bearer , priority 18 [ 173.903797][ T9589] lo speed is unknown, defaulting to 1000 [ 174.108044][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.305799][ T9603] lo speed is unknown, defaulting to 1000 [ 174.354014][ T9607] vlan2: entered allmulticast mode [ 174.363670][ T9607] bridge0: port 3(vlan2) entered blocking state [ 174.370931][ T9607] bridge0: port 3(vlan2) entered disabled state [ 174.410321][ T9596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.577800][ T9619] veth0_virt_wifi: entered allmulticast mode [ 174.635123][ T9619] lo speed is unknown, defaulting to 1000 [ 174.826344][ T9629] netlink: 'syz.0.982': attribute type 21 has an invalid length. [ 175.148185][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.259181][ T9651] lo speed is unknown, defaulting to 1000 [ 175.581870][ T9656] nbd: device at index 64 is going down [ 175.695362][ T9653] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.752148][ T9653] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.853919][ T9653] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.899068][ T9653] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.056172][ T9653] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.084958][ T9653] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.160323][ T9653] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.178067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.180341][ T9653] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.269558][ T9676] syzkaller1: entered promiscuous mode [ 176.282911][ T9676] syzkaller1: entered allmulticast mode [ 176.299642][ T9679] xt_TCPMSS: Only works on TCP SYN packets [ 176.403447][ T9679] : entered promiscuous mode [ 176.513244][ T9653] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.541520][ T9653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.579476][ T9653] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.606034][ T9653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.637223][ T9687] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 176.696038][ T9653] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.734906][ T9653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.877010][ T9653] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.897717][ T9653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.228082][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.577475][ T9727] lo speed is unknown, defaulting to 1000 [ 177.761156][ T9730] netlink: 'syz.4.1013': attribute type 4 has an invalid length. [ 178.167600][ T9735] netlink: 'syz.1.1014': attribute type 11 has an invalid length. [ 178.261061][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.297611][ T9738] sch_tbf: burst 3631 is lower than device lo mtu (11337746) ! [ 178.654584][ T9758] __nla_validate_parse: 15 callbacks suppressed [ 178.654620][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'. [ 178.655658][ T9761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1018'. [ 178.699574][ T9758] netlink: 'syz.4.1022': attribute type 7 has an invalid length. [ 178.701725][ T9761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.707303][ T9758] netlink: 'syz.4.1022': attribute type 8 has an invalid length. [ 178.707333][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 178.708769][ T9760] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 178.758224][ T9758] sctp: [Deprecated]: syz.4.1022 (pid 9758) Use of int in maxseg socket option. [ 178.758224][ T9758] Use struct sctp_assoc_value instead [ 178.800098][ T9764] bridge2: entered promiscuous mode [ 178.838124][ T9767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1022'. [ 178.892369][ T9769] xt_socket: unknown flags 0x4 [ 178.980228][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.989645][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.999892][ T9227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.110964][ T9776] xt_cgroup: path and classid specified [ 179.203911][ T9779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.229001][ T9779] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 179.250825][ T9776] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1027'. [ 179.297995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.804410][ T9796] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1034'. [ 179.859038][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 179.956884][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 180.077794][ T9803] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 180.157067][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.164700][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.186542][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 180.337949][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.453564][ T9817] netlink: 'syz.1.1039': attribute type 4 has an invalid length. [ 180.614914][ T9801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.660360][ T9801] batadv_slave_1: left promiscuous mode [ 180.699484][ T9801] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.708123][ T9801] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.757269][ T9801] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.784174][ T9801] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.821060][ T9801] geneve1: left promiscuous mode [ 180.925135][ T9801] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.933616][ T9801] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.942073][ T9801] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.950538][ T9801] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.284317][ T9843] xt_TCPMSS: Only works on TCP SYN packets [ 181.378083][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.423247][ T9853] bridge_slave_0: left allmulticast mode [ 181.429127][ T9853] bridge_slave_0: left promiscuous mode [ 181.435006][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.445797][ T9853] bridge_slave_1: left allmulticast mode [ 181.453512][ T9853] bridge_slave_1: left promiscuous mode [ 181.460154][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.478431][ T9853] bond0: (slave bond_slave_0): Releasing backup interface [ 181.493908][ T9853] bond0: (slave bond_slave_1): Releasing backup interface [ 181.519985][ T9853] team0: Port device team_slave_0 removed [ 181.534703][ T9853] team0: Port device team_slave_1 removed [ 181.539746][ T9859] netlink: 'syz.0.1049': attribute type 4 has an invalid length. [ 181.541758][ T9853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.556959][ T9853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.575667][ T9855] team0: Mode changed to "loadbalance" [ 181.591896][ T9852] netlink: 'syz.0.1049': attribute type 7 has an invalid length. [ 181.617119][ T9226] lo speed is unknown, defaulting to 1000 [ 181.623633][ T9858] lo speed is unknown, defaulting to 1000 [ 181.660263][ T9857] lo speed is unknown, defaulting to 1000 [ 181.666561][ T9855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1048'. [ 182.178272][ T9876] openvswitch: netlink: Missing valid actions attribute. [ 182.979010][ T9908] syzkaller1: entered promiscuous mode [ 182.984920][ T9908] syzkaller1: entered allmulticast mode [ 183.074690][ T9915] delete_channel: no stack [ 183.468185][ C0] net_ratelimit: 3 callbacks suppressed [ 183.468206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.494885][ T9928] bridge0: port 4(vlan0) entered blocking state [ 183.508131][ T9928] bridge0: port 4(vlan0) entered disabled state [ 183.514584][ T9928] vlan0: entered allmulticast mode [ 183.529629][ T9928] vlan0: left allmulticast mode [ 183.721444][ T9934] __nla_validate_parse: 5 callbacks suppressed [ 183.721462][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 183.745504][ T9933] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 183.757649][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1073'. [ 183.907985][ T9943] netlink: 'syz.1.1076': attribute type 2 has an invalid length. [ 184.036180][ T9948] netlink: 'syz.3.1078': attribute type 2 has an invalid length. [ 184.056344][ T9948] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 184.085418][ T9948] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1078'. [ 184.134256][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'. [ 184.175982][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 184.329296][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1082'. [ 184.350381][ T9964] FAULT_INJECTION: forcing a failure. [ 184.350381][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 184.385148][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 184.395130][ T9964] CPU: 1 UID: 0 PID: 9964 Comm: syz.0.1084 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 184.395158][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.395174][ T9964] Call Trace: [ 184.395181][ T9964] [ 184.395190][ T9964] dump_stack_lvl+0x241/0x360 [ 184.395232][ T9964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.395255][ T9964] ? __pfx__printk+0x10/0x10 [ 184.395279][ T9964] ? kmem_cache_alloc_noprof+0x48/0x380 [ 184.395309][ T9964] ? __pfx___might_resched+0x10/0x10 [ 184.395347][ T9964] should_fail_ex+0x40a/0x550 [ 184.395401][ T9964] should_failslab+0xac/0x100 [ 184.395431][ T9964] ? skb_clone+0x20c/0x390 [ 184.395456][ T9964] kmem_cache_alloc_noprof+0x70/0x380 [ 184.395491][ T9964] skb_clone+0x20c/0x390 [ 184.395522][ T9964] netlink_trim+0x19d/0x2e0 [ 184.395554][ T9964] netlink_broadcast_filtered+0x76/0x12a0 [ 184.395583][ T9964] ? __pfx_lock_release+0x10/0x10 [ 184.395617][ T9964] ? nf_tables_fill_gen_info+0x4ce/0x7b0 [ 184.395663][ T9964] nlmsg_notify+0xfb/0x1c0 [ 184.395699][ T9964] nf_tables_commit+0x8169/0x9140 [ 184.395782][ T9964] ? __pfx_nf_tables_commit+0x10/0x10 [ 184.395816][ T9964] ? free_large_kmalloc+0xfe/0x180 [ 184.395847][ T9964] ? nf_tables_newrule+0x23c5/0x2980 [ 184.395868][ T9964] ? kfree+0x212/0x430 [ 184.395894][ T9964] ? nft_trans_rule_add+0x30f/0x430 [ 184.395924][ T9964] ? nf_tables_newrule+0x245a/0x2980 [ 184.395961][ T9964] ? __pfx_nf_tables_newrule+0x10/0x10 [ 184.395981][ T9964] ? __skb_clone+0x5c/0x6c0 [ 184.396022][ T9964] ? __nla_parse+0x40/0x60 [ 184.396050][ T9964] nfnetlink_rcv+0xc77/0x2ab0 [ 184.396112][ T9964] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 184.396191][ T9964] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.396221][ T9964] ? skb_clone+0x240/0x390 [ 184.396247][ T9964] ? __pfx_lock_release+0x10/0x10 [ 184.396295][ T9964] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.396330][ T9964] netlink_unicast+0x7f6/0x990 [ 184.396368][ T9964] ? __pfx_netlink_unicast+0x10/0x10 [ 184.396394][ T9964] ? __virt_addr_valid+0x45f/0x530 [ 184.396416][ T9964] ? __phys_addr_symbol+0x2f/0x70 [ 184.396436][ T9964] ? __check_object_size+0x47a/0x730 [ 184.396471][ T9964] netlink_sendmsg+0x8de/0xcb0 [ 184.396530][ T9964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.396565][ T9964] ? aa_sock_msg_perm+0x91/0x160 [ 184.396614][ T9964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.396641][ T9964] __sock_sendmsg+0x221/0x270 [ 184.396673][ T9964] ____sys_sendmsg+0x53a/0x860 [ 184.396704][ T9964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.396731][ T9964] ? __fget_files+0x2a/0x410 [ 184.396762][ T9964] ? __fget_files+0x2a/0x410 [ 184.396799][ T9964] __sys_sendmsg+0x269/0x350 [ 184.396837][ T9964] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.396871][ T9964] ? do_sys_openat2+0x17a/0x1d0 [ 184.396922][ T9964] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.396951][ T9964] ? do_syscall_64+0x100/0x230 [ 184.396978][ T9964] ? do_syscall_64+0xb6/0x230 [ 184.397005][ T9964] do_syscall_64+0xf3/0x230 [ 184.397029][ T9964] ? clear_bhb_loop+0x35/0x90 [ 184.397074][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.397099][ T9964] RIP: 0033:0x7fa06818d169 [ 184.397121][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.397137][ T9964] RSP: 002b:00007fa06909e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.397165][ T9964] RAX: ffffffffffffffda RBX: 00007fa0683a5fa0 RCX: 00007fa06818d169 [ 184.397179][ T9964] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 184.397191][ T9964] RBP: 00007fa06909e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.397203][ T9964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.397214][ T9964] R13: 0000000000000000 R14: 00007fa0683a5fa0 R15: 00007fff0857a098 [ 184.397243][ T9964] [ 184.472480][ T9972] sctp: [Deprecated]: syz.4.1082 (pid 9972) Use of int in max_burst socket option. [ 184.472480][ T9972] Use struct sctp_assoc_value instead [ 184.499505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.508966][ T9974] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1087'. [ 184.846393][ T9974] openvswitch: netlink: Message has 8 unknown bytes. [ 184.883218][ T9980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 185.022575][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1092'. [ 185.037767][ T9994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.060669][ T9994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.070612][ T9994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.079604][ T9994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.097383][ T9994] geneve2: entered promiscuous mode [ 185.103495][ T9994] geneve2: entered allmulticast mode [ 185.131398][ T9994] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.140245][ T9994] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.157571][ T9994] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.173735][ T9994] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.286850][ T9997] bond1: entered promiscuous mode [ 185.292188][ T9997] bond1: entered allmulticast mode [ 185.297724][ T9997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.498989][T10007] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 185.520798][T10009] lo speed is unknown, defaulting to 1000 [ 185.548199][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.621936][T10012] netlink: 'syz.1.1099': attribute type 39 has an invalid length. [ 185.658007][T10000] tipc: Started in network mode [ 185.663024][T10000] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.672726][T10000] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.687938][T10000] tipc: Enabled bearer , priority 10 [ 185.808013][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.947985][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.051168][T10026] bond0: entered promiscuous mode [ 186.069394][T10026] bond_slave_0: entered promiscuous mode [ 186.075221][T10026] bond_slave_1: entered promiscuous mode [ 186.087898][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.093835][T10026] team0: entered promiscuous mode [ 186.107559][T10026] team_slave_0: entered promiscuous mode [ 186.121139][T10026] team_slave_1: entered promiscuous mode [ 186.132076][T10026] batadv0: entered promiscuous mode [ 186.149932][T10026] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 186.183214][T10026] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 186.194285][T10026] bond0: left promiscuous mode [ 186.210234][T10026] bond_slave_0: left promiscuous mode [ 186.225159][T10026] bond_slave_1: left promiscuous mode [ 186.230755][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.265704][T10026] team0: left promiscuous mode [ 186.270911][T10026] team_slave_0: left promiscuous mode [ 186.276905][T10026] team_slave_1: left promiscuous mode [ 186.283455][T10026] batadv0: left promiscuous mode [ 186.368239][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.406432][T10042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.483645][T10046] lo speed is unknown, defaulting to 1000 [ 186.616805][T10057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 186.787944][ T9235] tipc: Node number set to 2886997162 [ 187.077235][T10088] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 187.265418][T10091] lo speed is unknown, defaulting to 1000 [ 187.406346][T10098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.415602][T10098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.425680][T10098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.434709][T10098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.445520][T10098] geneve1: entered promiscuous mode [ 187.452574][T10098] geneve1: entered allmulticast mode [ 187.510161][T10098] syz.0.1125 (10098) used greatest stack depth: 17808 bytes left [ 188.202573][T10152] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 188.657997][ C0] net_ratelimit: 9 callbacks suppressed [ 188.658015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.737948][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.858189][T10164] __nla_validate_parse: 12 callbacks suppressed [ 188.858210][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 189.246895][T10149] team0 (unregistering): Port device team_slave_0 removed [ 189.267275][T10149] team0 (unregistering): Port device team_slave_1 removed [ 189.331658][T10152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.357472][T10155] bond3: (slave veth7): Enslaving as an active interface with a down link [ 189.396617][T10158] lo speed is unknown, defaulting to 1000 [ 189.566379][T10178] pimreg: entered allmulticast mode [ 189.598911][T10177] pimreg: left allmulticast mode [ 189.708105][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.730608][T10180] lo speed is unknown, defaulting to 1000 [ 189.777907][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.178755][T10214] lo speed is unknown, defaulting to 1000 [ 190.342167][T10215] lo speed is unknown, defaulting to 1000 [ 190.514972][T10222] wireguard0: entered promiscuous mode [ 190.520794][T10222] wireguard0: entered allmulticast mode [ 190.747917][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.817897][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.074749][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1165'. [ 191.097276][T10243] netlink: 'syz.0.1165': attribute type 62 has an invalid length. [ 191.114833][T10243] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1165'. [ 191.185218][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1166'. [ 191.430932][T10260] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 191.494413][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 191.519221][T10265] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 191.645056][T10278] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 191.719057][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 191.751350][T10280] lo speed is unknown, defaulting to 1000 [ 191.788267][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.857943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.979470][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 191.988966][T10300] openvswitch: netlink: Message has 3 unknown bytes. [ 191.998518][T10300] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 192.011614][T10300] team0: Port device wlan1 added [ 192.695277][T10317] 8021q: VLANs not supported on ip6_vti0 [ 192.828913][T10321] netlink: 'syz.1.1187': attribute type 22 has an invalid length. [ 192.859174][T10322] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 192.977512][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 193.685475][T10362] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 193.861708][ C0] net_ratelimit: 3 callbacks suppressed [ 193.861728][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.937891][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.497259][T10364] openvswitch: netlink: Duplicate or invalid key (type 0). [ 194.505622][T10364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.900725][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.977880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.223141][T10374] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 195.261444][T10378] lo speed is unknown, defaulting to 1000 [ 195.938135][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.017949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.379086][T10417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1210'. [ 196.406055][T10417] netlink: 'syz.1.1210': attribute type 6 has an invalid length. [ 196.422453][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 196.429617][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.435699][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.500801][T10419] lo speed is unknown, defaulting to 1000 [ 196.640901][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 196.650565][T10428] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 196.916752][T10439] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 196.921899][T10436] bond2: entered promiscuous mode [ 196.939143][T10436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.977893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.006381][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 197.057993][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.065845][T10447] netlink: 'syz.0.1219': attribute type 12 has an invalid length. [ 197.150118][T10451] nftables ruleset with unbound set [ 197.724834][T10482] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 198.161686][T10508] netlink: 'syz.0.1237': attribute type 1 has an invalid length. [ 198.449083][T10522] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 198.682997][T10539] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 198.729209][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1247'. [ 198.777168][T10541] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 198.793575][T10534] lo speed is unknown, defaulting to 1000 [ 198.801668][T10539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.823014][T10525] delete_channel: no stack [ 198.929941][T10539] veth3: entered promiscuous mode [ 198.944605][ T7020] net_ratelimit: 5 callbacks suppressed [ 198.944621][ T7020] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.979345][T10539] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 199.057995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.137932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.156975][T10555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'. [ 199.241133][T10553] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1256'. [ 199.260457][T10553] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1256'. [ 199.302504][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1256'. [ 199.347713][T10570] lo speed is unknown, defaulting to 1000 [ 199.480562][T10555] lo speed is unknown, defaulting to 1000 [ 199.653900][T10575] lo speed is unknown, defaulting to 1000 [ 199.729567][T10534] lo speed is unknown, defaulting to 1000 [ 200.098000][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.177973][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.284089][T10586] lo speed is unknown, defaulting to 1000 [ 200.855071][T10603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.927129][T10586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 200.948062][T10603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.129554][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 201.138625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.152394][T10608] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 201.160593][T10608] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 201.219458][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.795188][T10624] __nla_validate_parse: 1 callbacks suppressed [ 201.795206][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 201.821712][T10622] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 201.885763][T10620] lo speed is unknown, defaulting to 1000 [ 202.136504][T10620] lo speed is unknown, defaulting to 1000 [ 202.178166][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.214657][T10620] lo speed is unknown, defaulting to 1000 [ 202.243321][T10620] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.257917][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.335348][T10620] lo speed is unknown, defaulting to 1000 [ 202.351831][T10620] lo speed is unknown, defaulting to 1000 [ 202.378909][T10620] lo speed is unknown, defaulting to 1000 [ 202.398845][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'. [ 202.419867][T10620] lo speed is unknown, defaulting to 1000 [ 202.448611][T10620] lo speed is unknown, defaulting to 1000 [ 202.603429][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'. [ 202.635998][T10651] hsr_slave_0: left promiscuous mode [ 202.645451][T10651] hsr_slave_1: left promiscuous mode [ 202.697212][T10658] lo speed is unknown, defaulting to 1000 [ 202.770806][T10658] lo speed is unknown, defaulting to 1000 [ 202.900535][T10655] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 202.919432][T10655] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1285'. [ 203.058624][T10683] syzkaller1: entered promiscuous mode [ 203.077054][T10683] syzkaller1: entered allmulticast mode [ 203.104366][T10686] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 203.402120][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1296'. [ 203.414931][T10704] dummy0: entered promiscuous mode [ 203.430902][T10704] dummy0: left promiscuous mode [ 203.542844][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 203.552603][T10710] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1299'. [ 203.562954][T10710] netlink: 'syz.4.1299': attribute type 3 has an invalid length. [ 203.576720][T10710] netlink: 'syz.4.1299': attribute type 2 has an invalid length. [ 203.588842][T10710] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1299'. [ 203.886404][T10728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.105213][T10747] syzkaller0: entered promiscuous mode [ 204.111292][T10747] syzkaller0: entered allmulticast mode [ 204.149507][T10751] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.158542][T10751] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.167256][T10751] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.176046][T10751] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.258112][ C0] net_ratelimit: 3 callbacks suppressed [ 204.258130][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.337890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.455837][T10762] nbd: must specify a size in bytes for the device [ 204.744542][T10772] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1317'. [ 204.829987][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 204.855166][T10775] block nbd0: not configured, cannot reconfigure [ 205.028471][T10778] FAULT_INJECTION: forcing a failure. [ 205.028471][T10778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.056348][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.0.1318 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 205.056378][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.056392][T10778] Call Trace: [ 205.056400][T10778] [ 205.056408][T10778] dump_stack_lvl+0x241/0x360 [ 205.056447][T10778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.056472][T10778] ? __pfx__printk+0x10/0x10 [ 205.056495][T10778] ? __pfx_lock_release+0x10/0x10 [ 205.056537][T10778] should_fail_ex+0x40a/0x550 [ 205.056586][T10778] _copy_from_user+0x2d/0xb0 [ 205.056625][T10778] copy_msghdr_from_user+0xae/0x680 [ 205.056657][T10778] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 205.056683][T10778] ? __fget_files+0x2a/0x410 [ 205.056713][T10778] ? __fget_files+0x2a/0x410 [ 205.056747][T10778] __sys_sendmsg+0x209/0x350 [ 205.056773][T10778] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.056807][T10778] ? do_sys_openat2+0x17a/0x1d0 [ 205.056856][T10778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.056884][T10778] ? do_syscall_64+0x100/0x230 [ 205.056911][T10778] ? do_syscall_64+0xb6/0x230 [ 205.056938][T10778] do_syscall_64+0xf3/0x230 [ 205.056962][T10778] ? clear_bhb_loop+0x35/0x90 [ 205.056990][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.057014][T10778] RIP: 0033:0x7fa06818d169 [ 205.057028][T10778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.057044][T10778] RSP: 002b:00007fa06909e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.057062][T10778] RAX: ffffffffffffffda RBX: 00007fa0683a5fa0 RCX: 00007fa06818d169 [ 205.057075][T10778] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 205.057085][T10778] RBP: 00007fa06909e090 R08: 0000000000000000 R09: 0000000000000000 [ 205.057097][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.057107][T10778] R13: 0000000000000000 R14: 00007fa0683a5fa0 R15: 00007fff0857a098 [ 205.057132][T10778] [ 205.298011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.354608][T10781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.377882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.435740][T10783] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 206.348026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.422031][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.172690][T10808] vlan0: entered promiscuous mode [ 207.378006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.457908][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.531409][T10837] FAULT_INJECTION: forcing a failure. [ 207.531409][T10837] name failslab, interval 1, probability 0, space 0, times 0 [ 207.611750][T10837] CPU: 0 UID: 0 PID: 10837 Comm: syz.2.1332 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 207.611776][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.611787][T10837] Call Trace: [ 207.611794][T10837] [ 207.611802][T10837] dump_stack_lvl+0x241/0x360 [ 207.611829][T10837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.611850][T10837] ? __pfx__printk+0x10/0x10 [ 207.611869][T10837] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 207.611898][T10837] ? __pfx___might_resched+0x10/0x10 [ 207.611920][T10837] ? aa_label_sk_perm+0x4f3/0x6c0 [ 207.611950][T10837] should_fail_ex+0x40a/0x550 [ 207.611982][T10837] should_failslab+0xac/0x100 [ 207.612008][T10837] kmem_cache_alloc_node_noprof+0x77/0x380 [ 207.612033][T10837] ? __alloc_skb+0x1c3/0x440 [ 207.612056][T10837] __alloc_skb+0x1c3/0x440 [ 207.612079][T10837] ? __pfx___alloc_skb+0x10/0x10 [ 207.612107][T10837] netlink_sendmsg+0x634/0xcb0 [ 207.612145][T10837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.612176][T10837] ? aa_sock_msg_perm+0x91/0x160 [ 207.612208][T10837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.612234][T10837] __sock_sendmsg+0x221/0x270 [ 207.612263][T10837] ____sys_sendmsg+0x53a/0x860 [ 207.612293][T10837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.612312][T10837] ? __fget_files+0x2a/0x410 [ 207.612342][T10837] ? __fget_files+0x2a/0x410 [ 207.612381][T10837] __sys_sendmsg+0x269/0x350 [ 207.612407][T10837] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.612440][T10837] ? do_sys_openat2+0x17a/0x1d0 [ 207.612490][T10837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.612519][T10837] ? do_syscall_64+0x100/0x230 [ 207.612548][T10837] ? do_syscall_64+0xb6/0x230 [ 207.612575][T10837] do_syscall_64+0xf3/0x230 [ 207.612599][T10837] ? clear_bhb_loop+0x35/0x90 [ 207.612628][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.612652][T10837] RIP: 0033:0x7fdd31f8d169 [ 207.612667][T10837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.612683][T10837] RSP: 002b:00007fdd32eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.612702][T10837] RAX: ffffffffffffffda RBX: 00007fdd321a5fa0 RCX: 00007fdd31f8d169 [ 207.612715][T10837] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 207.612727][T10837] RBP: 00007fdd32eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 207.612738][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.612749][T10837] R13: 0000000000000000 R14: 00007fdd321a5fa0 R15: 00007ffcf16b4b58 [ 207.612776][T10837] [ 207.932434][T10844] __nla_validate_parse: 2 callbacks suppressed [ 207.932454][T10844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1334'. [ 208.065546][T10859] x_tables: duplicate underflow at hook 2 [ 208.417995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.422458][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 208.497874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.780196][T10900] mac80211_hwsim hwsim5 : renamed from wlan1 [ 208.942614][T10910] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1353'. [ 209.457907][ C0] net_ratelimit: 1 callbacks suppressed [ 209.457926][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.537885][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.603384][T10951] FAULT_INJECTION: forcing a failure. [ 209.603384][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.656888][T10951] CPU: 1 UID: 0 PID: 10951 Comm: syz.4.1361 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 209.656917][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.656928][T10951] Call Trace: [ 209.656935][T10951] [ 209.656943][T10951] dump_stack_lvl+0x241/0x360 [ 209.656970][T10951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.656990][T10951] ? __pfx__printk+0x10/0x10 [ 209.657010][T10951] ? __pfx_lock_release+0x10/0x10 [ 209.657046][T10951] should_fail_ex+0x40a/0x550 [ 209.657076][T10951] _copy_from_iter+0x1df/0x1c40 [ 209.657099][T10951] ? __virt_addr_valid+0x183/0x530 [ 209.657117][T10951] ? __pfx_lock_release+0x10/0x10 [ 209.657159][T10951] ? __alloc_skb+0x28f/0x440 [ 209.657178][T10951] ? __pfx__copy_from_iter+0x10/0x10 [ 209.657202][T10951] ? __virt_addr_valid+0x183/0x530 [ 209.657219][T10951] ? __virt_addr_valid+0x183/0x530 [ 209.657234][T10951] ? __virt_addr_valid+0x45f/0x530 [ 209.657252][T10951] ? __phys_addr_symbol+0x2f/0x70 [ 209.657269][T10951] ? __check_object_size+0x47a/0x730 [ 209.657298][T10951] netlink_sendmsg+0x742/0xcb0 [ 209.657337][T10951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.657368][T10951] ? aa_sock_msg_perm+0x91/0x160 [ 209.657401][T10951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.657427][T10951] __sock_sendmsg+0x221/0x270 [ 209.657457][T10951] ____sys_sendmsg+0x53a/0x860 [ 209.657486][T10951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.657506][T10951] ? __fget_files+0x2a/0x410 [ 209.657535][T10951] ? __fget_files+0x2a/0x410 [ 209.657570][T10951] __sys_sendmsg+0x269/0x350 [ 209.657596][T10951] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.657629][T10951] ? do_sys_openat2+0x17a/0x1d0 [ 209.657678][T10951] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.657707][T10951] ? do_syscall_64+0x100/0x230 [ 209.657735][T10951] ? do_syscall_64+0xb6/0x230 [ 209.657761][T10951] do_syscall_64+0xf3/0x230 [ 209.657789][T10951] ? clear_bhb_loop+0x35/0x90 [ 209.657817][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.657840][T10951] RIP: 0033:0x7ff6b0f8d169 [ 209.657855][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.657871][T10951] RSP: 002b:00007ff6b1d9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.657889][T10951] RAX: ffffffffffffffda RBX: 00007ff6b11a5fa0 RCX: 00007ff6b0f8d169 [ 209.657902][T10951] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 209.657913][T10951] RBP: 00007ff6b1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.657923][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.657934][T10951] R13: 0000000000000000 R14: 00007ff6b11a5fa0 R15: 00007fff0b2878f8 [ 209.657959][T10951] [ 209.693274][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 209.854652][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 209.872386][T10959] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 209.964506][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 209.998539][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 210.065199][T10962] netlink: 'syz.3.1362': attribute type 3 has an invalid length. [ 210.112358][T10962] netlink: 'syz.3.1362': attribute type 3 has an invalid length. [ 210.130282][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 210.433204][T10986] lo speed is unknown, defaulting to 1000 [ 210.464588][T10986] lo speed is unknown, defaulting to 1000 [ 210.498023][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.577869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.992152][T11008] 8021q: VLANs not supported on vxcan1 [ 211.056776][T11012] FAULT_INJECTION: forcing a failure. [ 211.056776][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 211.080298][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 211.117910][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.0.1374 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 211.117934][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.117945][T11012] Call Trace: [ 211.117952][T11012] [ 211.117959][T11012] dump_stack_lvl+0x241/0x360 [ 211.117987][T11012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.118013][T11012] ? __pfx__printk+0x10/0x10 [ 211.118044][T11012] should_fail_ex+0x40a/0x550 [ 211.118077][T11012] should_failslab+0xac/0x100 [ 211.118102][T11012] ? skb_clone+0x20c/0x390 [ 211.118124][T11012] kmem_cache_alloc_noprof+0x70/0x380 [ 211.118154][T11012] skb_clone+0x20c/0x390 [ 211.118180][T11012] __netlink_deliver_tap+0x3c4/0x7f0 [ 211.118219][T11012] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.118245][T11012] netlink_deliver_tap+0x19d/0x1b0 [ 211.118273][T11012] netlink_unicast+0x7c4/0x990 [ 211.118306][T11012] ? __pfx_netlink_unicast+0x10/0x10 [ 211.118329][T11012] ? __virt_addr_valid+0x45f/0x530 [ 211.118348][T11012] ? __phys_addr_symbol+0x2f/0x70 [ 211.118364][T11012] ? __check_object_size+0x47a/0x730 [ 211.118394][T11012] netlink_sendmsg+0x8de/0xcb0 [ 211.118432][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.118465][T11012] ? aa_sock_msg_perm+0x91/0x160 [ 211.118497][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.118524][T11012] __sock_sendmsg+0x221/0x270 [ 211.118553][T11012] ____sys_sendmsg+0x53a/0x860 [ 211.118583][T11012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.118603][T11012] ? __fget_files+0x2a/0x410 [ 211.118633][T11012] ? __fget_files+0x2a/0x410 [ 211.118668][T11012] __sys_sendmsg+0x269/0x350 [ 211.118694][T11012] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.118728][T11012] ? do_sys_openat2+0x17a/0x1d0 [ 211.118780][T11012] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.118810][T11012] ? do_syscall_64+0x100/0x230 [ 211.118837][T11012] ? do_syscall_64+0xb6/0x230 [ 211.118864][T11012] do_syscall_64+0xf3/0x230 [ 211.118888][T11012] ? clear_bhb_loop+0x35/0x90 [ 211.118917][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.118941][T11012] RIP: 0033:0x7fa06818d169 [ 211.118956][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.118972][T11012] RSP: 002b:00007fa06909e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.118990][T11012] RAX: ffffffffffffffda RBX: 00007fa0683a5fa0 RCX: 00007fa06818d169 [ 211.119009][T11012] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 211.119020][T11012] RBP: 00007fa06909e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.119031][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.119042][T11012] R13: 0000000000000000 R14: 00007fa0683a5fa0 R15: 00007fff0857a098 [ 211.119070][T11012] [ 211.538014][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.618077][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.777007][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1379'. [ 211.862882][T11048] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 211.865366][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1383'. [ 212.195596][T11074] netlink: 'syz.1.1387': attribute type 6 has an invalid length. [ 212.234751][T11073] veth1_virt_wifi: left promiscuous mode [ 212.252147][T11073] veth1_virt_wifi: left allmulticast mode [ 212.267523][T11073] bond1: left promiscuous mode [ 212.277330][T11073] ip6tnl1: left allmulticast mode [ 212.282735][T11073] macvtap1: left promiscuous mode [ 212.292290][T11073] macvtap1: left allmulticast mode [ 212.297575][T11073] macsec1: left promiscuous mode [ 212.331077][T11073] macsec1: left allmulticast mode [ 212.346524][T11073] bond2: left promiscuous mode [ 212.355830][T11073] geneve2: left promiscuous mode [ 212.363663][T11073] geneve2: left allmulticast mode [ 212.372666][T11073] bridge2: left promiscuous mode [ 212.469980][T11095] syzkaller1: entered promiscuous mode [ 212.475793][T11095] syzkaller1: entered allmulticast mode [ 212.521097][T11099] geneve0: entered allmulticast mode [ 212.578015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.657933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.816348][T11114] xt_CT: No such helper "snmp" [ 212.835197][T11114] veth0_to_batadv: entered promiscuous mode [ 212.845009][T11114] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 212.902104][T11117] netlink: 'syz.2.1400': attribute type 16 has an invalid length. [ 213.008815][T11121] netlink: 'syz.4.1402': attribute type 5 has an invalid length. [ 213.038525][T11121] __nla_validate_parse: 5 callbacks suppressed [ 213.038541][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 213.265947][T11138] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20001 [ 213.490201][T11151] tls_set_device_offload_rx: netdev not found [ 213.507241][T11152] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 213.552570][T11152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.561592][T11152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.571049][T11152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.580017][T11152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.590591][T11152] bond3: (slave geneve2): making interface the new active one [ 213.602185][T11152] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 213.618000][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.651913][T11162] FAULT_INJECTION: forcing a failure. [ 213.651913][T11162] name failslab, interval 1, probability 0, space 0, times 0 [ 213.654371][T11152] syz.4.1411 (11152) used greatest stack depth: 17712 bytes left [ 213.665232][T11162] CPU: 1 UID: 0 PID: 11162 Comm: syz.3.1414 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 213.665255][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.665267][T11162] Call Trace: [ 213.665274][T11162] [ 213.665283][T11162] dump_stack_lvl+0x241/0x360 [ 213.665311][T11162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.665334][T11162] ? __pfx__printk+0x10/0x10 [ 213.665360][T11162] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 213.665407][T11162] ? __pfx___might_resched+0x10/0x10 [ 213.665453][T11162] ? rcu_is_watching+0x15/0xb0 [ 213.665485][T11162] should_fail_ex+0x40a/0x550 [ 213.665534][T11162] should_failslab+0xac/0x100 [ 213.665567][T11162] __kmalloc_node_noprof+0xe1/0x4d0 [ 213.665598][T11162] ? __kvmalloc_node_noprof+0x72/0x190 [ 213.665626][T11162] __kvmalloc_node_noprof+0x72/0x190 [ 213.665651][T11162] nf_hook_entries_grow+0x288/0x720 [ 213.665681][T11162] ? __mutex_unlock_slowpath+0x227/0x800 [ 213.665725][T11162] __nf_register_net_hook+0x278/0x8d0 [ 213.665770][T11162] nf_register_net_hook+0xb0/0x190 [ 213.665804][T11162] nf_register_net_hooks+0x41/0x1a0 [ 213.665839][T11162] nf_ct_netns_do_get+0x3b0/0x630 [ 213.665874][T11162] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 213.665909][T11162] ? nft_validate_register_store+0x188/0x1d0 [ 213.665947][T11162] ? nft_parse_register_store+0x215/0x290 [ 213.665984][T11162] nft_ct_get_init+0x63f/0x8b0 [ 213.666027][T11162] nf_tables_newrule+0x1857/0x2980 [ 213.666068][T11162] ? __pfx_nf_tables_newrule+0x10/0x10 [ 213.666089][T11162] ? __skb_clone+0x5c/0x6c0 [ 213.666133][T11162] ? __nla_parse+0x40/0x60 [ 213.666169][T11162] nfnetlink_rcv+0x14e3/0x2ab0 [ 213.666193][T11162] ? __pfx_validate_chain+0x10/0x10 [ 213.666258][T11162] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 213.666297][T11162] ? __lock_acquire+0x1397/0x2100 [ 213.666374][T11162] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.666410][T11162] ? __pfx_lock_release+0x10/0x10 [ 213.666473][T11162] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.666517][T11162] netlink_unicast+0x7f6/0x990 [ 213.666558][T11162] ? __pfx_netlink_unicast+0x10/0x10 [ 213.666586][T11162] ? __virt_addr_valid+0x45f/0x530 [ 213.666609][T11162] ? __phys_addr_symbol+0x2f/0x70 [ 213.666630][T11162] ? __check_object_size+0x47a/0x730 [ 213.666677][T11162] netlink_sendmsg+0x8de/0xcb0 [ 213.666724][T11162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.666762][T11162] ? aa_sock_msg_perm+0x91/0x160 [ 213.666803][T11162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.666833][T11162] __sock_sendmsg+0x221/0x270 [ 213.666869][T11162] ____sys_sendmsg+0x53a/0x860 [ 213.666906][T11162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.666929][T11162] ? __fget_files+0x2a/0x410 [ 213.666966][T11162] ? __fget_files+0x2a/0x410 [ 213.667008][T11162] __sys_sendmsg+0x269/0x350 [ 213.667040][T11162] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.667080][T11162] ? do_sys_openat2+0x17a/0x1d0 [ 213.667144][T11162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.667178][T11162] ? do_syscall_64+0x100/0x230 [ 213.667210][T11162] ? do_syscall_64+0xb6/0x230 [ 213.667243][T11162] do_syscall_64+0xf3/0x230 [ 213.667271][T11162] ? clear_bhb_loop+0x35/0x90 [ 213.667305][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.667334][T11162] RIP: 0033:0x7fae0b38d169 [ 213.667353][T11162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.667370][T11162] RSP: 002b:00007fae0c152038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.667393][T11162] RAX: ffffffffffffffda RBX: 00007fae0b5a5fa0 RCX: 00007fae0b38d169 [ 213.667410][T11162] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 213.667422][T11162] RBP: 00007fae0c152090 R08: 0000000000000000 R09: 0000000000000000 [ 213.667436][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.667449][T11162] R13: 0000000000000000 R14: 00007fae0b5a5fa0 R15: 00007ffe50a32818 [ 213.667483][T11162] [ 213.697943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.181462][T11171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1415'. [ 214.201544][T11173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1415'. [ 214.304148][T11175] netlink: 'syz.4.1420': attribute type 16 has an invalid length. [ 214.322696][T11175] netlink: 'syz.4.1420': attribute type 3 has an invalid length. [ 214.335760][T11175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1420'. [ 214.376486][T11175] sctp: [Deprecated]: syz.4.1420 (pid 11175) Use of int in max_burst socket option deprecated. [ 214.376486][T11175] Use struct sctp_assoc_value instead [ 214.394102][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 214.409169][T11181] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 214.454150][T11184] bond4: entered promiscuous mode [ 214.477447][T11184] bond4: entered allmulticast mode [ 214.483952][T11184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.524895][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 214.629667][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 214.668013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.700168][T11202] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 214.737959][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.816413][T11202] lo speed is unknown, defaulting to 1000 [ 214.908029][T11202] lo speed is unknown, defaulting to 1000 [ 215.185766][T11220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1431'. [ 215.198905][T11222] validate_nla: 33 callbacks suppressed [ 215.198921][T11222] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 215.259136][T11225] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 215.298677][T11222] batman_adv: batadv0: Adding interface: macvtap0 [ 215.332907][T11222] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.381642][T11222] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 215.523739][T11242] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 215.544125][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1438'. [ 215.604199][T11242] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.698004][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.782932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.964420][T11257] macvlan2: entered promiscuous mode [ 215.972218][T11257] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 216.142246][T11274] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1447'. [ 216.213344][T11264] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 216.404814][T11286] FAULT_INJECTION: forcing a failure. [ 216.404814][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 216.448034][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.4.1451 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 216.448061][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.448075][T11286] Call Trace: [ 216.448081][T11286] [ 216.448090][T11286] dump_stack_lvl+0x241/0x360 [ 216.448121][T11286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.448165][T11286] ? __pfx__printk+0x10/0x10 [ 216.448188][T11286] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 216.448217][T11286] ? __pfx___might_resched+0x10/0x10 [ 216.448241][T11286] ? rcu_is_watching+0x15/0xb0 [ 216.448267][T11286] should_fail_ex+0x40a/0x550 [ 216.448302][T11286] should_failslab+0xac/0x100 [ 216.448329][T11286] __kmalloc_node_noprof+0xe1/0x4d0 [ 216.448356][T11286] ? __kvmalloc_node_noprof+0x72/0x190 [ 216.448380][T11286] __kvmalloc_node_noprof+0x72/0x190 [ 216.448401][T11286] nf_hook_entries_grow+0x288/0x720 [ 216.448427][T11286] ? __mutex_unlock_slowpath+0x227/0x800 [ 216.448465][T11286] __nf_register_net_hook+0x278/0x8d0 [ 216.448510][T11286] nf_register_net_hook+0xb0/0x190 [ 216.448539][T11286] nf_register_net_hooks+0x41/0x1a0 [ 216.448568][T11286] nf_ct_netns_do_get+0x3b0/0x630 [ 216.448599][T11286] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 216.448629][T11286] ? nft_validate_register_store+0x188/0x1d0 [ 216.448662][T11286] ? nft_parse_register_store+0x215/0x290 [ 216.448694][T11286] nft_ct_get_init+0x63f/0x8b0 [ 216.448731][T11286] nf_tables_newrule+0x1857/0x2980 [ 216.448767][T11286] ? __pfx_nf_tables_newrule+0x10/0x10 [ 216.448784][T11286] ? __skb_clone+0x5c/0x6c0 [ 216.448821][T11286] ? __nla_parse+0x40/0x60 [ 216.448847][T11286] nfnetlink_rcv+0x14e3/0x2ab0 [ 216.448869][T11286] ? __pfx_validate_chain+0x10/0x10 [ 216.448924][T11286] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 216.448959][T11286] ? __lock_acquire+0x1397/0x2100 [ 216.449025][T11286] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.449056][T11286] ? __pfx_lock_release+0x10/0x10 [ 216.449099][T11286] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.449139][T11286] netlink_unicast+0x7f6/0x990 [ 216.449175][T11286] ? __pfx_netlink_unicast+0x10/0x10 [ 216.449200][T11286] ? __virt_addr_valid+0x45f/0x530 [ 216.449220][T11286] ? __phys_addr_symbol+0x2f/0x70 [ 216.449237][T11286] ? __check_object_size+0x47a/0x730 [ 216.449269][T11286] netlink_sendmsg+0x8de/0xcb0 [ 216.449311][T11286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.449345][T11286] ? aa_sock_msg_perm+0x91/0x160 [ 216.449380][T11286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.449409][T11286] __sock_sendmsg+0x221/0x270 [ 216.449441][T11286] ____sys_sendmsg+0x53a/0x860 [ 216.449473][T11286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.449495][T11286] ? __fget_files+0x2a/0x410 [ 216.449526][T11286] ? __fget_files+0x2a/0x410 [ 216.449564][T11286] __sys_sendmsg+0x269/0x350 [ 216.449611][T11286] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.449650][T11286] ? do_sys_openat2+0x17a/0x1d0 [ 216.449710][T11286] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.449745][T11286] ? do_syscall_64+0x100/0x230 [ 216.449776][T11286] ? do_syscall_64+0xb6/0x230 [ 216.449807][T11286] do_syscall_64+0xf3/0x230 [ 216.449834][T11286] ? clear_bhb_loop+0x35/0x90 [ 216.449865][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.449892][T11286] RIP: 0033:0x7ff6b0f8d169 [ 216.449910][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.449927][T11286] RSP: 002b:00007ff6b1d9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.449949][T11286] RAX: ffffffffffffffda RBX: 00007ff6b11a5fa0 RCX: 00007ff6b0f8d169 [ 216.449964][T11286] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 216.449976][T11286] RBP: 00007ff6b1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 216.449989][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.450000][T11286] R13: 0000000000000000 R14: 00007ff6b11a5fa0 R15: 00007fff0b2878f8 [ 216.450033][T11286] [ 216.768165][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.817948][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.884365][T11291] netlink: 'syz.2.1453': attribute type 13 has an invalid length. [ 217.182613][T11311] xt_time: unknown flags 0x4 [ 217.442466][T11324] FAULT_INJECTION: forcing a failure. [ 217.442466][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 217.455805][T11324] CPU: 1 UID: 0 PID: 11324 Comm: syz.4.1464 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 217.455834][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.455847][T11324] Call Trace: [ 217.455855][T11324] [ 217.455864][T11324] dump_stack_lvl+0x241/0x360 [ 217.455898][T11324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.455923][T11324] ? __pfx__printk+0x10/0x10 [ 217.455947][T11324] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 217.455980][T11324] ? __pfx___might_resched+0x10/0x10 [ 217.456007][T11324] ? rcu_is_watching+0x15/0xb0 [ 217.456045][T11324] should_fail_ex+0x40a/0x550 [ 217.456084][T11324] should_failslab+0xac/0x100 [ 217.456115][T11324] __kmalloc_node_noprof+0xe1/0x4d0 [ 217.456145][T11324] ? __kvmalloc_node_noprof+0x72/0x190 [ 217.456172][T11324] __kvmalloc_node_noprof+0x72/0x190 [ 217.456195][T11324] nf_hook_entries_grow+0x288/0x720 [ 217.456239][T11324] __nf_register_net_hook+0x278/0x8d0 [ 217.456284][T11324] nf_register_net_hook+0xb0/0x190 [ 217.456316][T11324] nf_register_net_hooks+0x41/0x1a0 [ 217.456349][T11324] nf_ct_netns_do_get+0x3b0/0x630 [ 217.456384][T11324] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 217.456417][T11324] ? nft_validate_register_store+0x188/0x1d0 [ 217.456453][T11324] ? nft_parse_register_store+0x215/0x290 [ 217.456492][T11324] nft_ct_get_init+0x63f/0x8b0 [ 217.456533][T11324] nf_tables_newrule+0x1857/0x2980 [ 217.456573][T11324] ? __pfx_nf_tables_newrule+0x10/0x10 [ 217.456604][T11324] ? __skb_clone+0x5c/0x6c0 [ 217.456645][T11324] ? __nla_parse+0x40/0x60 [ 217.456673][T11324] nfnetlink_rcv+0x14e3/0x2ab0 [ 217.456697][T11324] ? __pfx_validate_chain+0x10/0x10 [ 217.456756][T11324] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.456793][T11324] ? __lock_acquire+0x1397/0x2100 [ 217.456863][T11324] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.456896][T11324] ? __pfx_lock_release+0x10/0x10 [ 217.456942][T11324] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.456976][T11324] netlink_unicast+0x7f6/0x990 [ 217.457019][T11324] ? __pfx_netlink_unicast+0x10/0x10 [ 217.457045][T11324] ? __virt_addr_valid+0x45f/0x530 [ 217.457067][T11324] ? __phys_addr_symbol+0x2f/0x70 [ 217.457086][T11324] ? __check_object_size+0x47a/0x730 [ 217.457120][T11324] netlink_sendmsg+0x8de/0xcb0 [ 217.457165][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.457202][T11324] ? aa_sock_msg_perm+0x91/0x160 [ 217.457240][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.457282][T11324] __sock_sendmsg+0x221/0x270 [ 217.457314][T11324] ____sys_sendmsg+0x53a/0x860 [ 217.457346][T11324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.457368][T11324] ? __fget_files+0x2a/0x410 [ 217.457400][T11324] ? __fget_files+0x2a/0x410 [ 217.457438][T11324] __sys_sendmsg+0x269/0x350 [ 217.457467][T11324] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.457505][T11324] ? do_sys_openat2+0x17a/0x1d0 [ 217.457561][T11324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.457592][T11324] ? do_syscall_64+0x100/0x230 [ 217.457622][T11324] ? do_syscall_64+0xb6/0x230 [ 217.457650][T11324] do_syscall_64+0xf3/0x230 [ 217.457676][T11324] ? clear_bhb_loop+0x35/0x90 [ 217.457707][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.457732][T11324] RIP: 0033:0x7ff6b0f8d169 [ 217.457749][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.457766][T11324] RSP: 002b:00007ff6b1d9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.457786][T11324] RAX: ffffffffffffffda RBX: 00007ff6b11a5fa0 RCX: 00007ff6b0f8d169 [ 217.457800][T11324] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 217.457812][T11324] RBP: 00007ff6b1d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 217.457823][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.457835][T11324] R13: 0000000000000000 R14: 00007ff6b11a5fa0 R15: 00007fff0b2878f8 [ 217.457865][T11324] [ 217.817906][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.824151][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 217.857933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.258522][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 218.288053][T11338] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 218.317090][T11338] lo speed is unknown, defaulting to 1000 [ 218.350264][T11338] lo speed is unknown, defaulting to 1000 [ 218.643164][T11353] lo speed is unknown, defaulting to 1000 [ 218.665412][T11353] lo speed is unknown, defaulting to 1000 [ 218.701554][T11354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.724002][ T9218] lo speed is unknown, defaulting to 1000 [ 218.990112][T11357] x_tables: duplicate entry at hook 2 [ 219.289227][T11373] __nla_validate_parse: 5 callbacks suppressed [ 219.289245][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 219.348641][T11373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1477'. [ 219.374967][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1477'. [ 219.400509][T11373] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1477'. [ 219.475786][T11373] netlink: 'syz.1.1477': attribute type 10 has an invalid length. [ 219.485575][T11385] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1478'. [ 219.536896][T11385] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.566307][T11385] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.593335][T11385] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.642977][T11385] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.676787][T11385] geneve3: entered promiscuous mode [ 219.776162][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 219.824702][T11396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1482'. [ 219.834483][T11396] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1482'. [ 219.937957][ C1] net_ratelimit: 1 callbacks suppressed [ 219.937975][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.938861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.018811][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 220.072170][T11424] netlink: 'syz.3.1488': attribute type 10 has an invalid length. [ 220.081086][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1488'. [ 220.106349][T11420] lo speed is unknown, defaulting to 1000 [ 220.107200][T11424] geneve0: left allmulticast mode [ 220.134832][T11424] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.169731][T11424] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.181733][T11424] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.195686][T11424] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.225652][T11424] team0: Failed to send options change via netlink (err -105) [ 220.241766][T11424] team0: Port device geneve0 added [ 220.258773][T11420] lo speed is unknown, defaulting to 1000 [ 220.289640][T11430] lo speed is unknown, defaulting to 1000 [ 220.327052][T11430] lo speed is unknown, defaulting to 1000 [ 220.456486][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 220.717624][T11453] gretap0: left promiscuous mode [ 220.765246][T11453] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.774644][T11453] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.788012][T11453] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.797005][T11453] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.848799][T11453] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 220.857767][T11453] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.867088][T11453] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.877865][T11453] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.886759][T11453] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.955632][T11458] ================================================================== [ 220.963711][T11458] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.972474][T11458] Write of size 8 at addr ffff88807a2b7b70 by task syz.1.1496/11458 [ 220.980443][T11458] [ 220.982763][T11458] CPU: 1 UID: 0 PID: 11458 Comm: syz.1.1496 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 220.982780][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.982789][T11458] Call Trace: [ 220.982795][T11458] [ 220.982802][T11458] dump_stack_lvl+0x241/0x360 [ 220.982821][T11458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.982837][T11458] ? __pfx__printk+0x10/0x10 [ 220.982851][T11458] ? _printk+0xd5/0x120 [ 220.982863][T11458] ? __virt_addr_valid+0x183/0x530 [ 220.982881][T11458] ? __virt_addr_valid+0x183/0x530 [ 220.982895][T11458] print_report+0x16e/0x5b0 [ 220.982914][T11458] ? __virt_addr_valid+0x183/0x530 [ 220.982926][T11458] ? __virt_addr_valid+0x183/0x530 [ 220.982938][T11458] ? __virt_addr_valid+0x45f/0x530 [ 220.982951][T11458] ? __phys_addr+0xba/0x170 [ 220.982964][T11458] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.982980][T11458] kasan_report+0x143/0x180 [ 220.982998][T11458] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.983015][T11458] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.983032][T11458] gtp_encap_enable_socket+0x435/0x5c0 [ 220.983052][T11458] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 220.983069][T11458] ? __pfx_gtp_encap_recv+0x10/0x10 [ 220.983085][T11458] ? __pfx_gtp_encap_destroy+0x10/0x10 [ 220.983103][T11458] ? rcu_is_watching+0x15/0xb0 [ 220.983118][T11458] ? trace_kmalloc+0x1f/0xd0 [ 220.983155][T11458] ? __kmalloc_noprof+0x2a5/0x4c0 [ 220.983175][T11458] ? gtp_newlink+0x285/0xf70 [ 220.983192][T11458] gtp_newlink+0x7b5/0xf70 [ 220.983209][T11458] ? __pfx_gtp_newlink+0x10/0x10 [ 220.983226][T11458] rtnl_newlink_create+0x37b/0xbd0 [ 220.983244][T11458] ? __mutex_lock+0x602/0x1010 [ 220.983265][T11458] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 220.983282][T11458] ? __pfx___mutex_lock+0x10/0x10 [ 220.983305][T11458] ? ns_capable+0x8a/0xf0 [ 220.983323][T11458] rtnl_newlink+0x167a/0x1d90 [ 220.983352][T11458] ? __pfx_rtnl_newlink+0x10/0x10 [ 220.983375][T11458] ? __pfx_validate_chain+0x10/0x10 [ 220.983404][T11458] ? validate_chain+0x11e/0x5920 [ 220.983426][T11458] ? __pfx_lock_acquire+0x10/0x10 [ 220.983458][T11458] ? __pfx_lock_release+0x10/0x10 [ 220.983489][T11458] ? __pfx_validate_chain+0x10/0x10 [ 220.983512][T11458] ? mark_lock+0x9a/0x360 [ 220.983533][T11458] ? __lock_acquire+0x1397/0x2100 [ 220.983578][T11458] ? __pfx_lock_release+0x10/0x10 [ 220.983616][T11458] ? __pfx_rtnl_newlink+0x10/0x10 [ 220.983646][T11458] rtnetlink_rcv_msg+0x791/0xcf0 [ 220.983676][T11458] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 220.983706][T11458] ? __lock_acquire+0x1397/0x2100 [ 220.983735][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.983774][T11458] netlink_rcv_skb+0x206/0x480 [ 220.983797][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.983821][T11458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.983862][T11458] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.983889][T11458] netlink_unicast+0x7f6/0x990 [ 220.983911][T11458] ? __pfx_netlink_unicast+0x10/0x10 [ 220.983928][T11458] ? __virt_addr_valid+0x45f/0x530 [ 220.983942][T11458] ? __phys_addr_symbol+0x2f/0x70 [ 220.983954][T11458] ? __check_object_size+0x47a/0x730 [ 220.983975][T11458] netlink_sendmsg+0x8de/0xcb0 [ 220.984000][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.984022][T11458] ? aa_sock_msg_perm+0x91/0x160 [ 220.984046][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.984066][T11458] __sock_sendmsg+0x221/0x270 [ 220.984087][T11458] ____sys_sendmsg+0x53a/0x860 [ 220.984106][T11458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.984121][T11458] ? __fget_files+0x2a/0x410 [ 220.984143][T11458] ? __fget_files+0x2a/0x410 [ 220.984166][T11458] __sys_sendmsg+0x269/0x350 [ 220.984181][T11458] ? __pfx_futex_wake+0x10/0x10 [ 220.984203][T11458] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.984233][T11458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.984255][T11458] ? do_syscall_64+0x100/0x230 [ 220.984275][T11458] ? do_syscall_64+0xb6/0x230 [ 220.984295][T11458] do_syscall_64+0xf3/0x230 [ 220.984313][T11458] ? clear_bhb_loop+0x35/0x90 [ 220.984334][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.984353][T11458] RIP: 0033:0x7f69eeb8d169 [ 220.984365][T11458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.984377][T11458] RSP: 002b:00007f69ef94c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.984392][T11458] RAX: ffffffffffffffda RBX: 00007f69eeda6080 RCX: 00007f69eeb8d169 [ 220.984402][T11458] RDX: 000000000000c8c0 RSI: 0000400000000280 RDI: 0000000000000004 [ 220.984412][T11458] RBP: 00007f69eec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.984421][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.984429][T11458] R13: 0000000000000000 R14: 00007f69eeda6080 R15: 00007ffd7cf43908 [ 220.984445][T11458] [ 220.984450][T11458] [ 220.998342][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.005212][T11458] Allocated by task 9549: [ 221.460246][T11458] kasan_save_track+0x3f/0x80 [ 221.464924][T11458] __kasan_slab_alloc+0x66/0x80 [ 221.469774][T11458] kmem_cache_alloc_noprof+0x1d9/0x380 [ 221.475229][T11458] sk_prot_alloc+0x58/0x210 [ 221.479721][T11458] sk_alloc+0x3e/0x370 [ 221.483786][T11458] inet_create+0x648/0xea0 [ 221.488207][T11458] __sock_create+0x4c0/0xa30 [ 221.492794][T11458] __sys_socket+0x150/0x3c0 [ 221.497299][T11458] __x64_sys_socket+0x7a/0x90 [ 221.501991][T11458] do_syscall_64+0xf3/0x230 [ 221.506512][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.512413][T11458] [ 221.514729][T11458] Freed by task 9549: [ 221.518696][T11458] kasan_save_track+0x3f/0x80 [ 221.523364][T11458] kasan_save_free_info+0x40/0x50 [ 221.528385][T11458] __kasan_slab_free+0x59/0x70 [ 221.533142][T11458] kmem_cache_free+0x195/0x410 [ 221.537902][T11458] __sk_destruct+0x4fd/0x690 [ 221.542484][T11458] inet_release+0x17d/0x200 [ 221.547073][T11458] sock_close+0xbc/0x240 [ 221.551320][T11458] __fput+0x3e9/0x9f0 [ 221.555314][T11458] task_work_run+0x24f/0x310 [ 221.559903][T11458] do_exit+0xa2a/0x28e0 [ 221.564054][T11458] do_group_exit+0x207/0x2c0 [ 221.568639][T11458] get_signal+0x168c/0x1720 [ 221.573131][T11458] arch_do_signal_or_restart+0x96/0x860 [ 221.578671][T11458] syscall_exit_to_user_mode+0xce/0x340 [ 221.584208][T11458] do_syscall_64+0x100/0x230 [ 221.588791][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.594684][T11458] [ 221.596994][T11458] The buggy address belongs to the object at ffff88807a2b7440 [ 221.596994][T11458] which belongs to the cache UDP of size 1856 [ 221.610430][T11458] The buggy address is located 1840 bytes inside of [ 221.610430][T11458] freed 1856-byte region [ffff88807a2b7440, ffff88807a2b7b80) [ 221.624396][T11458] [ 221.626760][T11458] The buggy address belongs to the physical page: [ 221.633154][T11458] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a2b6c80 pfn:0x7a2b0 [ 221.643212][T11458] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.651701][T11458] memcg:ffff88807ae0e101 [ 221.655934][T11458] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 221.664433][T11458] page_type: f5(slab) [ 221.668428][T11458] raw: 00fff00000000240 ffff888145687780 ffffea00006ec810 ffff8880202f3dc8 [ 221.677270][T11458] raw: ffff88807a2b6c80 0000000000100000 00000000f5000000 ffff88807ae0e101 [ 221.685854][T11458] head: 00fff00000000240 ffff888145687780 ffffea00006ec810 ffff8880202f3dc8 [ 221.694521][T11458] head: ffff88807a2b6c80 0000000000100000 00000000f5000000 ffff88807ae0e101 [ 221.703189][T11458] head: 00fff00000000003 ffffea0001e8ac01 ffffffffffffffff 0000000000000000 [ 221.711865][T11458] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 221.720530][T11458] page dumped because: kasan: bad access detected [ 221.726941][T11458] page_owner tracks the page as allocated [ 221.732642][T11458] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9271, tgid 9268 (syz.4.871), ts 166890596049, free_ts 166257635114 [ 221.753914][T11458] post_alloc_hook+0x1f4/0x240 [ 221.758691][T11458] get_page_from_freelist+0x365c/0x37a0 [ 221.764236][T11458] __alloc_frozen_pages_noprof+0x292/0x710 [ 221.770045][T11458] alloc_pages_mpol+0x311/0x660 [ 221.774890][T11458] allocate_slab+0x8f/0x3a0 [ 221.779395][T11458] ___slab_alloc+0xc27/0x14a0 [ 221.784059][T11458] __slab_alloc+0x58/0xa0 [ 221.788377][T11458] kmem_cache_alloc_noprof+0x268/0x380 [ 221.793830][T11458] sk_prot_alloc+0x58/0x210 [ 221.798323][T11458] sk_alloc+0x3e/0x370 [ 221.802477][T11458] inet_create+0x648/0xea0 [ 221.806917][T11458] __sock_create+0x4c0/0xa30 [ 221.811525][T11458] __sys_socket+0x150/0x3c0 [ 221.816036][T11458] __x64_sys_socket+0x7a/0x90 [ 221.820717][T11458] do_syscall_64+0xf3/0x230 [ 221.825215][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.831107][T11458] page last free pid 9247 tgid 9247 stack trace: [ 221.837505][T11458] free_frozen_pages+0xe0d/0x10e0 [ 221.842522][T11458] __put_partials+0x160/0x1c0 [ 221.847198][T11458] put_cpu_partial+0x17c/0x250 [ 221.851952][T11458] __slab_free+0x290/0x380 [ 221.856364][T11458] qlist_free_all+0x9a/0x140 [ 221.860950][T11458] kasan_quarantine_reduce+0x14f/0x170 [ 221.866410][T11458] __kasan_slab_alloc+0x23/0x80 [ 221.871264][T11458] kmem_cache_alloc_noprof+0x1d9/0x380 [ 221.876721][T11458] getname_flags+0xb7/0x540 [ 221.881220][T11458] __x64_sys_symlinkat+0x87/0xb0 [ 221.886157][T11458] do_syscall_64+0xf3/0x230 [ 221.890666][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.896562][T11458] [ 221.898910][T11458] Memory state around the buggy address: [ 221.904541][T11458] ffff88807a2b7a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.912595][T11458] ffff88807a2b7a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.920643][T11458] >ffff88807a2b7b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.928689][T11458] ^ [ 221.936406][T11458] ffff88807a2b7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.944565][T11458] ffff88807a2b7c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.952620][T11458] ================================================================== [ 221.961044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.969281][T11458] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.976475][T11458] CPU: 1 UID: 0 PID: 11458 Comm: syz.1.1496 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 221.987221][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.997440][T11458] Call Trace: [ 222.000720][T11458] [ 222.003645][T11458] dump_stack_lvl+0x241/0x360 [ 222.008336][T11458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.013541][T11458] ? __pfx__printk+0x10/0x10 [ 222.018122][T11458] ? vscnprintf+0x5d/0x90 [ 222.022442][T11458] panic+0x349/0x880 [ 222.026328][T11458] ? check_panic_on_warn+0x21/0xb0 [ 222.031457][T11458] ? __pfx_panic+0x10/0x10 [ 222.035862][T11458] ? mark_lock+0x9a/0x360 [ 222.040189][T11458] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 222.046081][T11458] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 222.051967][T11458] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.058376][T11458] ? print_report+0x519/0x5b0 [ 222.063143][T11458] check_panic_on_warn+0x86/0xb0 [ 222.068101][T11458] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 222.074078][T11458] end_report+0x77/0x160 [ 222.078328][T11458] kasan_report+0x154/0x180 [ 222.082853][T11458] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 222.088822][T11458] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 222.094621][T11458] gtp_encap_enable_socket+0x435/0x5c0 [ 222.100076][T11458] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 222.106073][T11458] ? __pfx_gtp_encap_recv+0x10/0x10 [ 222.111266][T11458] ? __pfx_gtp_encap_destroy+0x10/0x10 [ 222.116716][T11458] ? rcu_is_watching+0x15/0xb0 [ 222.121484][T11458] ? trace_kmalloc+0x1f/0xd0 [ 222.126134][T11458] ? __kmalloc_noprof+0x2a5/0x4c0 [ 222.131177][T11458] ? gtp_newlink+0x285/0xf70 [ 222.135766][T11458] gtp_newlink+0x7b5/0xf70 [ 222.140179][T11458] ? __pfx_gtp_newlink+0x10/0x10 [ 222.145110][T11458] rtnl_newlink_create+0x37b/0xbd0 [ 222.150213][T11458] ? __mutex_lock+0x602/0x1010 [ 222.154974][T11458] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 222.160604][T11458] ? __pfx___mutex_lock+0x10/0x10 [ 222.165631][T11458] ? ns_capable+0x8a/0xf0 [ 222.169959][T11458] rtnl_newlink+0x167a/0x1d90 [ 222.174649][T11458] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.179676][T11458] ? __pfx_validate_chain+0x10/0x10 [ 222.184878][T11458] ? validate_chain+0x11e/0x5920 [ 222.189896][T11458] ? __pfx_lock_acquire+0x10/0x10 [ 222.194925][T11458] ? __pfx_lock_release+0x10/0x10 [ 222.199949][T11458] ? __pfx_validate_chain+0x10/0x10 [ 222.205139][T11458] ? mark_lock+0x9a/0x360 [ 222.209467][T11458] ? __lock_acquire+0x1397/0x2100 [ 222.214543][T11458] ? __pfx_lock_release+0x10/0x10 [ 222.219586][T11458] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.224609][T11458] rtnetlink_rcv_msg+0x791/0xcf0 [ 222.229540][T11458] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 222.234648][T11458] ? __lock_acquire+0x1397/0x2100 [ 222.239664][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.245122][T11458] netlink_rcv_skb+0x206/0x480 [ 222.249906][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.255388][T11458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.260704][T11458] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.265901][T11458] netlink_unicast+0x7f6/0x990 [ 222.270663][T11458] ? __pfx_netlink_unicast+0x10/0x10 [ 222.275953][T11458] ? __virt_addr_valid+0x45f/0x530 [ 222.281057][T11458] ? __phys_addr_symbol+0x2f/0x70 [ 222.286066][T11458] ? __check_object_size+0x47a/0x730 [ 222.291348][T11458] netlink_sendmsg+0x8de/0xcb0 [ 222.296112][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.301398][T11458] ? aa_sock_msg_perm+0x91/0x160 [ 222.306336][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.311620][T11458] __sock_sendmsg+0x221/0x270 [ 222.316385][T11458] ____sys_sendmsg+0x53a/0x860 [ 222.321148][T11458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.326425][T11458] ? __fget_files+0x2a/0x410 [ 222.331016][T11458] ? __fget_files+0x2a/0x410 [ 222.335622][T11458] __sys_sendmsg+0x269/0x350 [ 222.340203][T11458] ? __pfx_futex_wake+0x10/0x10 [ 222.345045][T11458] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.350176][T11458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.356520][T11458] ? do_syscall_64+0x100/0x230 [ 222.361296][T11458] ? do_syscall_64+0xb6/0x230 [ 222.365978][T11458] do_syscall_64+0xf3/0x230 [ 222.370489][T11458] ? clear_bhb_loop+0x35/0x90 [ 222.375160][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.381132][T11458] RIP: 0033:0x7f69eeb8d169 [ 222.385539][T11458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.405139][T11458] RSP: 002b:00007f69ef94c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.413554][T11458] RAX: ffffffffffffffda RBX: 00007f69eeda6080 RCX: 00007f69eeb8d169 [ 222.421528][T11458] RDX: 000000000000c8c0 RSI: 0000400000000280 RDI: 0000000000000004 [ 222.429502][T11458] RBP: 00007f69eec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.437467][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.445525][T11458] R13: 0000000000000000 R14: 00007f69eeda6080 R15: 00007ffd7cf43908 [ 222.453500][T11458] [ 222.456896][T11458] Kernel Offset: disabled [ 222.461215][T11458] Rebooting in 86400 seconds..